On Tue, Aug 29, 2000 at 03:19:00PM +0400, Andrey A. Chernov wrote:
> By quick looking I found this:
> 
> 1) strtok() should not be used in libraries, use strsep() instead.
> 
> 2) There is security hole with LOCALE_ALIASES_PATH env. issetugid() check
> required.
> 
> 3) The same functionality should be added to NLS (catgets() etc.) to make
> it really working.

4) Not lstat() but stat() should be used for existence checking.

-- 
Andrey A. Chernov
<[EMAIL PROTECTED]>
http://ache.pp.ru/


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to