Date: Fri, 1 Jul 2011 22:36:21 +0200 From: Tomas Hoger <thoger@...hat.com> To: oss-security@...ts.openwall.com Cc: cxib@...urityreason.com Subject: Re: Re: php ZipArchive::addGlob() crashes on invalid flags On Fri, 01 Jul 2011 18:34:51 +0200 Maksymilian Arciemowicz wrote: > Using glob(3) with invalid flag may give unexpected results. Try > glob(3) of netbsd implementations and use flags 0x39 0x40.. I don't have an easy way to test on netbsd, but looking at glob.h in netbsd cvs, 0x40 is GLOB_ALTDIRFUNC, and 0x39 contains GLOB_APPEND, which were problematic on glibc as well. Both due to uninitialized glob_t members. -- Tomas Hoger / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.