httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jason A. Dour" <...@bcc.louisville.edu>
Subject Re: [FIX] PR#339: AIGH! suEXEC QUERY_STRING problem solved!
Date Fri, 25 Apr 1997 13:18:56 GMT
-----BEGIN PGP SIGNED MESSAGE-----

On Fri, 25 Apr 1997, Randy Terbush wrote:
> variable... (more coffee)
> 
> 
> > 
> > execve() does not accept a vairable argument list. I don't see a 
> > glaring problem with the existing code.
> > 

	Glaring problem is that create_argv() *escapes the ~ in the ~user
argument, thus breaking suEXEC*.

	So the execve() call needs to be changed to execle() which does
take VALs.  That should do it, yes?

Jason
# Jason A. Dour <jad@bcc.louisville.edu>                            1101
# Programmer Analyst II; Department of Radiation Oncology; Univ. of Lou.
# Finger for URLs, PGP public key, geek code, PJ Harvey info, et cetera.


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBM2CvQpo1JaC71RLxAQFdgQP8DMCjdo40htf47kjG3v3wz3zVT3WjGAaD
MC559FbEu/K+TFPLfJDzTL6wujth5O5j4zjFIYic58iULshdvWGHpm9qkJEC8l6A
ghRqOE7RWT8/nTA5757ixGKnYEZORI4JS78V9hUFRQmkv9oR+yCXMgUZEqD5vtd3
tdhCKeF2mY0=
=pMlH
-----END PGP SIGNATURE-----


Mime
View raw message