Re: Issues with cdrsin and USB devices on RHEL5

["Thomas Schmitt" <scdbackup@gmx.net>]

Hi,

> I tested 0.4.9:
> - hda is not touched
> - no buffer overflow
> - "cdrskin --devices" will show both devices even if no /dev/sr0 is present
> - "cdrskin dev=/dev/scd0 ..." burns ok

Good to know.


But your hda has not been touched by the older
version. libburn carefully avoids to open it
because it is opened O_EXCL by some other entity.

On other systems, a IDE hard disk device can get
opened by libburn. But this lasts only until 
ioctl(HDIO_GET_IDENTITY) fails to show an indication
that this is an ATAPI device. Then it gets closed.
A hard disk can stand that. A busy CD burner cannot.

The only dangerous bug today was the buffer overflow.
(Please everybody do not use cdrskin as setuid but
rather allow rw-acces to the device file.)

As stated already, i will re-assess the way how
libburn finds and opens drives. The /proc info
shall not be ignored any more.


Have a nice day :)

Thomas