Subject: Re: NULL program argument checks?
To: Christos Zoulas <christos@astron.com>
From: Hubert Feyrer <hubert@feyrer.de>
List: tech-security
Date: 04/06/2006 10:18:07
On Thu, 6 Apr 2006, Christos Zoulas wrote:
>> It complain because I have not checked id != NULL. Is it safe to assume
>> that if ac >= n, then av[n + 1] is not NULL? On NetBSD? Generally
>> speaking?
>
> This will only happen if id is checked somewhere else for NULL or av is
> tested somewhere else for NULL. What's the CID?

I think this only happens if argc isn't consistent with argv[]. Looking at 
the execl() etc. prototypes, it seems that "something" is calculating argc 
automatically, and that an inconsistent argc can't be passed in 
malliciously at least...


  - Hubert