Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Posting-Version: version B 2.10.3 4.3bsd-beta 6/6/85; site seismo.CSS.GOV Path: utzoo!linus!gatech!seismo!keith From: keith@seismo.CSS.GOV (Keith Bostic) Newsgroups: net.bugs.2bsd Subject: CSS/Harvard 2.9BSD bug report #13 Message-ID: <736@seismo.CSS.GOV> Date: Fri, 8-Nov-85 15:45:34 EST Article-I.D.: seismo.736 Posted: Fri Nov 8 15:45:34 1985 Date-Received: Sat, 9-Nov-85 06:24:11 EST Organization: Center for Seismic Studies, Arlington, VA Lines: 20 Keywords: sys1.c, shell scripts, indir Subject: Executable shell scripts can crash the system. Index: sys/sys1.c 2.9BSD Description: Kernel doesn't check for more than one level of executable shell scripts. Repeat-By: Execute "see" or any shell program that executes another shell script. Fix: Apply the following diff. sys1.c.right << >> sys1.c.wrong 75,76c76,77 < goto bad; /* check if script. one level only */ < if (!indir && u.u_exdata.ux_shell[0] == '#' && u.u_exdata.ux_shell[1] == '!') { --- > goto bad; /* check if script. one level only */ > if (u.u_exdata.ux_shell[0] == '#' && u.u_exdata.ux_shell[1] == '!') {