Mention other audit for string routines that were used without bound checking
This commit is contained in:
parent
edc0af8cd3
commit
f5cb6a2fa0
@ -1,4 +1,4 @@
|
||||
.\" $NetBSD: main,v 1.92 2000/11/13 23:01:36 hubertf Exp $
|
||||
.\" $NetBSD: main,v 1.93 2000/11/14 07:26:37 hubertf Exp $
|
||||
.\"
|
||||
.\" Copyright (c) 1999, 2000 The NetBSD Foundation, Inc.
|
||||
.\" All rights reserved.
|
||||
@ -266,7 +266,9 @@ security).
|
||||
Disable various services by default, and set the default options for
|
||||
disabled daemons to a higher level of logging.
|
||||
.It
|
||||
Several code audits were performed, the last one identifying and disabling
|
||||
Several code audits were performed. One audit replaced
|
||||
string routines that were used without bound checking, and another
|
||||
one to identify and disable
|
||||
places where format strings were used in an
|
||||
unsafe way, allowing arbitrary data enterred by (possibly) mallicious
|
||||
users to overwrite application code, and leading from Denial of
|
||||
|
Loading…
Reference in New Issue
Block a user