[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 30 Mar 2003 17:18:05 +0600
From: Boris Kovalenko <boris@...net.ru>
To: popa3d-users@...ts.openwall.com
Subject: Re: virtual.c another question
Solar Designer wrote:
>On Sun, Mar 30, 2003 at 01:29:38PM +0600, Boris Kovalenko wrote:
>
>Hi,
>
>
>>Why to run other code if we already know that user is invalid? Why lstat
>>directory and try to open file for this "INVALID" user?
>>
>>
>
>This is to reduce information leaks via timing.
>
What type of information? May be I need do the same within my module?
Please be more concretic.
>
>
>
Boris
Powered by blists - more mailing lists
Powered by Openwall GNU/*/Linux -
Powered by OpenVZ
