[svlug] buffer overflow exploit in /usr/bin/false

[Mark Willey]

Seems like they're popping up everywhere.  :)

What I'm curious about is "Is there a progammatic method for determining if
a given source code has potential buffer overrun holes?"  If anyone knows
about a research project or product that is doing this, please speak up.
It would be nice to give people tools that would assist them to verify that
their source codes are safe.  (Something that would not have many false
positives, ie better than "grep strcpy .....")  :)

Mark

PS. The teaser that /usr/bin/false is vunerable is, uh....  false.  ;-)
    Go look at it.  :)


--
echo "unsubscribe svlug" | mail majordomo at svlug.org
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ to unsubscribe