[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <loom.20101216T144016-496@post.gmane.org>
Date: Thu, 16 Dec 2010 17:00:57 +0000 (UTC)
From: Ralf Wildenhues <Ralf.Wildenhues@....de>
To: oss-security@...ts.openwall.com
Subject: Re: Breaking the links: Exploiting the linker
Hello Tim, all,
Tim Brown <timb@...> writes:
>
> In the interests of a thorough peer review I'd be curious what people think
> of the following paper I've been working on Linux and POSIX linkers:
>
> http://www.nth-dimension.org.uk/downloads.php?id=77
Replacing
LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/dir/name
with
LD_LIBRARY_PATH=${LD_LIBRARY_PATH:-/dir/name}
changes semantics in a way that are not generally desirable: if I want to
append a directory to the search path, then the latter is not the way to
do it (because it doesn't change the path if the variable is already set).
Rather, I think you meant
LD_LIBRARY_PATH=${LD_LIBRARY_PATH:-$LD_LIBRARY_PATH:}/dir/name
(no quotes are needed on the right hand side of the '=' sign, as the shell
doesn't word-split there).
On page 5, the footnotes have several markup errors resulting in weird PDF
output.
I suggest using the url package for nicer URL typesetting (in case you're
writing this with LaTeX) and the hyperref package with
\hypersetup{pdfborder={0 0 0}} for decent clickable links.
So much for a quick look.
Cheers,
Ralf
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
