there exist some minor flaws in the code of ermixer: 1* the files opened are not checked to be a real device/file and this can (unlikely) be a problem if someone really bad makes nasty symlinks... 2* conf = fopen(pathname, "w"); if pathname specified is longer than PATH_MAX the trailing .profile will be cutted away without error checking 3) the parser for the config has several flow , one of these is a non stack based buffer overflow in devs[y] 4) deleteFile has the same problem of truncating .profile at the end those are minor flaws but i think that this piece of software doesn't act as someone is expecting in race conditions... so maybe it's a good idea to fix it instead of bothering about 'this is not a security problem if you don't suid it'. Not all bugs are security problems :) tnx for your time
Okay, but wouldn't it be better to report these upstream to ermixer developers? You can file a bug report with them at http://sourceforge.net/projects/ermixer/
My feeling is that I don't want to maintain a local patch for the application, unless it's warranted by security considerations.
