[sudo-commits] sudo changeset 10989:9ad60fe663e5
Todd C. Miller
Todd.Miller at courtesan.com
Thu Jun 1 10:26:38 MDT 2017
changeset: 10989:9ad60fe663e5 in /raid/repos/sudo
user: Todd C. Miller <Todd.Miller at courtesan.com>
date: Wed May 31 09:14:31 2017 -0600
A command name may also contain newline characters so read
/proc/self/stat until EOF. It is not legal for /proc/self/stat to
contain embedded NUL bytes so treat the file as corrupt if we see
any. With help from Qualys.
This is not exploitable due to the /dev traversal changes in sudo
1.8.20p1 (thanks Solar!).
src/ttyname.c | 39 ++++++++++++++++++++++++++-------------
1 files changed, 26 insertions(+), 13 deletions(-)
More information about the sudo-commits