Re: Python, Linux, and the setuid bit

Chris Angelico writes: > Richard Kettlewell wrote: >> Ethan Furman writes: >>> memset(envp_write, 0, ((unsigned int) envp_read - >>>(unsigned int) envp_write)); >> >> That is a remarkable blunder for a security-criti

Re: Python, Linux, and the setuid bit

Ethan Furman writes: > memset(envp_write, 0, ((unsigned int) envp_read - >(unsigned int) envp_write)); That is a remarkable blunder for a security-critical program. On a 64-bit platform, the best case outcome is that it will throw away the top 32 bits of e