Re: where to start?

[John McDermott <jjm@jkintl.com>]

I supose type 3 includes "Misbehavior Bugs" where the system is supposed
to* do one thing and does another.  That fits somewhat in type 4, but
*could* be a security issue as with your truncating example.

*"supposed to" as documented by comments or manuals of some sort

--john

Rik van Riel wrote:

> 
> 3) stability bugs where the user can "exploit" some special
>    situation to make the kernel behave badly or crash
>    (eg. write to a file you're truncating, confusing buffer.c
>    and various other places)

> Rik
> --

-- 
John McDermott, Writer and Consultant
J-K International, Ltd.
V +1 505/377-6293  F +1 505/377-6313
jjm@jkintl.com

Kernel-audit:  discussion list for security and the linux kernel
Archive:       http://mail.nl.linux.org/kernel-audit/