Re: SECURITY PROBLEM: autofs [all versions]

["Christopher W. Curtis" <ccurtis@aet-usa.com>]

Joey Hess wrote:
> 
> Christopher W. Curtis wrote:
> > It is essentially a "crash" - a term I initially used quoted, and
> > dropped the quotes later.  The program made an insufficient check and
> > tried to run an illegal set of instructions.  Under unix, this often
> > results in a core dump.  Under Windows, a UAE.  The shell happens to
> > ignore it and continue processing.  But the lack of a core dump does not
> > mean it's correct.
> 
> Oh baloney. Trying to run a non-executable file will never cause a core
> dump.

And I certainly never made any claim it would.

However:

int main()
{	FILE *foo = popen( "non-executable.file", "r+ );
	fprintf( foo, "hmm" );
}
	
> You're grasping at straws. Give it up.

I am inundated with straws.

Christopher