|Next||Program Repair Shop||55|
Subtle problems occur with the shell
Hard to detect even in simple programs
Casual analysis was no good
We said ``It only runs finger.''
We were wrong: it also runs /bin/sh.
/bin/sh is very complicated!
This class isn't about CGI security, so I'll leave it at that
|Next||Copyright © 2006 M. J. Dominus|