Re: 2.2.0 SECURITY

Jan Niehusmann (jan@gondor.com)
Wed, 27 Jan 1999 12:07:39 +0100

On Tue, Jan 26, 1999 at 09:46:06PM -0700, Dan Burcaw wrote:
> Take any core file, and as normal user or root run: ldd core

I just traced what ldd does:

ldd is a shell script, and the command causing the crash actually is:

/lib/ld-linux.so.2 --verify "./core"

This command crashes 2.2.0 as ldd ./core does.

A quick look at the code shows that ld-linux, in the --verify case,
doesn't really execute core, it mmaps it and tries to decide if
core is an elf executable. But I didn't really try to understand
what ld-linux does...

Jan

-- 
PGP-Key-ID:  1024/DAD29745 1994/09/02 Jan Niehusmann <jan@gondor.com>
Fingerprint: C9 99 62 ED 57 A3 13 74  75 33 00 7B D8 0C 14 17


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/