[3212] in bugtraq
Re: libresolv+ bug
daemon@ATHENA.MIT.EDU (Steve Czetty)
Mon Aug 19 14:34:07 1996
Date: Mon, 19 Aug 1996 05:02:03 -0500
Reply-To: Bugtraq List <BUGTRAQ@NETSPACE.ORG>
From: Steve Czetty <czetts@rpi.edu>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@NETSPACE.ORG>
In-Reply-To: Your message of "Sun, 18 Aug 1996 02:56:16 EDT."
<Pine.LNX.3.95.960818025102.7620A-100000@eclectic.kluge.net>
>In response to the libresolv+ hole ... I'm sure there's a better/more
>encompassing/cleaner method of fixing it, but here's my patch for ping (I
Yes.. I (once again) patched my libc to ignore the environment variable
altogether.. Why do we need to have the ability to specify an
/etc/host.conf other than /etc/host.conf???
-Steve
-----
--- libc/inet/gethstnmad.c.old Fri Aug 16 14:17:23 1996
+++ libc/inet/gethstnmad.c Fri Aug 16 14:18:12 1996
@@ -306,9 +306,13 @@
#if NLS
libc_nls_init();
#endif
+#ifdef INSECURE_ENV_HOSTCONF
if(NULL==(hostconf=getenv(ENV_HOSTCONF))){
hostconf=_PATH_HOSTCONF;
}
+#else
+ hostconf=_PATH_HOSTCONF;
+#endif
if ((fd = (FILE *)fopen(hostconf, "r")) == NULL) {
/* make some assumptions */
service_order[0] = SERVICE_BIND;
