Subject: Re: NetBSD Security Advisory 1999-008
To: Bill Studenmund <skippy@macro.Stanford.EDU>
From: Andrew Brown <atatat@atatdot.net>
List: current-users
Date: 04/15/1999 01:35:47
>>   Also unclear in the advisory is that 1.4_ALPHA only panics if you try
>> linking your current directory.  If you do the same thing (+ ls) but link 
>> a different directory, it too hangs.
>
>You're right that the advisory was unclear, but it's not "a different
>directory" which is the problem, but if the text of the symlink starts
>with a "/" or not.
>
>Say you're in /tmp/a, and /tmp/b exists.
>
>ln -s ../b/ foo
>ln -s ../b/ foo
>
>will give  the locking panic.
>
>ln -s /tmp/b/ foo
>ln -s /tmp/b/ foo
>
>will hang whenever you do something like an ls.
>...

it "sounds" to me (rather admittedly in the dark about things like
this) that like this is small *class* of problems that have only been
touched on.

my aforementioned 1.3.2 machine would panic every single time i did
it.  whether with the set given in the actual advisory or with the set
i first heard about (ln -s . foo ; ln -s ./ foo (iirc)).

-- 
|-----< "CODE WARRIOR" >-----|
codewarrior@daemon.org             * "ah!  i see you have the internet
twofsonet@graffiti.com (Andrew Brown)                that goes *ping*!"
andrew@crossbar.com       * "information is power -- share the wealth."