This is the mail archive of the cygwin@sourceware.cygnus.com mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]

Re: Security hole in gnu-win32-gcc


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This was found an discussed a while back you can search the ml 
archive's for exact times, but nothing was ever decisive about it 
other then its there an nothing can be done. I have found reboot the 
win95 system an before ya do anything else as in opening a secure 
document do your compiling then and only then open the secure 
document. 

At 07:40 PM 9/9/97 +0000, Daniel Kroening wrote:
>Hello,
>
>I discovered a security hole in cygnus gnu-win32 gcc: Obviously,
>allocated ram is not initialised. The generated binaries thus 
contain
>parts of the main memory of the machine compiling it. In binaries, 
where
>uninitialied arrays are, I discovered parts of web pages and other 
data
>of the memory. It might sound harmless, but confident documents or 
even
>pgp secret keys might get disclosed.
>
>Daniel Krvning
-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.0
Charset: noconv

iQA/AwUBNBgjqw6ne3t4b32aEQIXdQCgwNI9qcxbIZO884lQjB3Uq4kSn6gAoNDb
OaldB/O+u6KnWeOAABhnKR2j
=t0eZ
-----END PGP SIGNATURE-----

-------------------------------------------------------
Jason L. Esman aka _Jman  Owner Den Internet Services
System Admin. Network Consulting 
http://www.deninc.com | (down) irc.lx.net irc.deninc.com
Email jman@lx.net or root@lx.net
Finger jman@lx.net for PGP Public Keys... 
-------------------------------------------------------

-
For help on using this list (especially unsubscribing), send a message to
"gnu-win32-request@cygnus.com" with one line of text: "help".


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]