Hey,
I just downloaded the 1.9.1 source tarball, and was looking at ping.c's main. 
There's a call done to do privdropping:

  /* Reset root privileges */
  setuid (getuid ());

Which can be unsafe, if setuid() fails. The return value should be checked.

Regards,
Ilja  van Sprundel.

Reply via email to