Openwall Project   /home  Owl  JtR  Pro  crypt  pam_passwdqc  tcb  phpass  scanlogd  popa3d  msulogin  /  Linux  BIND  /  advisories  presentations  /  services  donations  /  wordlists  passwords  /  community  lists  wiki  CVSweb  mirrors  signatures
bringing security into open environments
 
Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide
[<prev] [next>] [thread-next>] [month] [year] [list]
Date: Sun, 30 Mar 2003 13:29:38 +0600
From: Boris Kovalenko <boris@...net.ru>
To:  popa3d-users@...ts.openwall.com
Subject: virtual.c another question

Hello!

virtual.c/virtual_userpass
fail = 0;
if (!is_valid_user(user)) {
      user = "INVALID";
      fail = 1;
}
.... many other code

Why to run other code if we already know that user is invalid? Why lstat 
directory and try to open file for this "INVALID" user?

Yours truly,
	Boris

Hosted by DataForce ISP - Powered by Openwall GNU/*/Linux