*BSD News Article 89790


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!news.rmit.EDU.AU!goanna.cs.rmit.edu.au!news.apana.org.au!cantor.edge.net.au!news.teragen.com.au!news.access.net.au!news.mel.connect.com.au!news.mel.aone.net.au!grumpy.fl.net.au!news.webspan.net!news.intersurf.net!hunter.premier.net!newsfeeds.sol.net!news.maxwell.syr.edu!cpk-news-hub1.bbnplanet.com!cam-news-hub1.bbnplanet.com!news.bbnplanet.com!news.mathworks.com!enews.sgi.com!news.sgi.com!newshub.sdsu.edu!rohan!treed
From: treed@rohan.sdsu.edu (Tracy R. Reed)
Newsgroups: comp.unix.bsd.netbsd.misc,comp.security.unix
Subject: Re: Careless integration of others' code (WAS Re: Why no addusr?)
Followup-To: comp.unix.bsd.netbsd.misc,comp.security.unix
Date: 20 Feb 1997 00:39:55 GMT
Organization: San Diego State University
Lines: 15
Message-ID: <5eg6gr$c2o@hole.sdsu.edu>
References: <none-ya023480001912962244220001@news.infi.net> <DERAADT.97Feb15155022@zeus.pacifier.com> <5e5vkb$d89@panix2.panix.com> <DERAADT.97Feb15212032@zeus.pacifier.com> <5e6e59$nmq@panix2.panix.com> <slrn5gdi5r.cne.tqbf@char-star.rdist.org>
NNTP-Posting-Host: rohan.sdsu.edu
X-Newsreader: TIN [version 1.2 PL0]
Xref: euryale.cc.adfa.oz.au comp.unix.bsd.netbsd.misc:5509 comp.security.unix:32021

Thomas H. Ptacek (tqbf@char-star.rdist.org) wrote:
: while hurling accusations that you've yet to document. Please, I'm asking
: as an interested third party, can you (or anyone else) document an actual
: security problem introduced into OpenBSD as a result of the integration of
: external code?

So...was unchecked code actually integrated or not? If so, I'd say that 
was a security problem. If not, there's not much point in your continuing 
this debate.

----------
Tracy Reed
http://ultraviolet.org
http://www.linux.org - Escape the Gates of Hell