bugTiger UNIX security tool - Bugs: bug #33969, Bug in mkfilelst, reads sticky bit...


bug #33969: Bug in mkfilelst, reads sticky bit twice

Submitter:  pyllyukko <pyllyukko>
Submitted:  Mon 08 Aug 2011 07:06:05 PM UTC
Category:  None Severity:  5-Critical
Item Group:  Script error Status:  Fixed
Privacy:  Public Assigned to:  jfs
Open/Closed:  Open Operating System:  Any Linux
* Mandatory Fields

Add a New Comment Rich Markup

Sun 04 Feb 2018 08:38:27 PM UTC, comment #1: 

Thank you, I have applied the patch and committed a fix to GIT.

Javier Fernandez-Sanguino Peña <jfs>
Group administrator
Mon 08 Aug 2011 07:06:05 PM UTC, original submission:  

There is a bug in the mkfilelst script which causes false positive alerts. The bug is on line 141 (Tiger 3.2.3), the script tries to read the sticky bit twice.

At least the following false positives are generated because of this:

- perm023a
- perm024a

pyllyukko <pyllyukko>


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:

Attached Files
file #23764:  mkfilelst.patch added by pyllyukko (616B - text/x-diff)


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by jfs (Posted a comment)
  • -email is unavailable- added by pyllyukko (Submitted the item)
  • -email is unavailable- added by pyllyukko (bug in tiger)

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.


    Follow 4 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2018-02-04 jfs StatusNone Fixed
        Assigned toNone jfs
    2011-08-08 pyllyukko Attached File- Added mkfilelst.patch, #23764
        Carbon-Copy- Added pyllyukko

    Back to the top

    Powered by Savane 3.13-4b48.
    Corresponding source code