From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103376,71171f53c22d92b5 X-Google-Attributes: gid103376,public X-Google-ArrivalTime: 2003-11-13 19:35:14 PST Message-ID: <3FB44C78.5050501@nowhere.com> Date: Fri, 14 Nov 2003 11:31:04 +0800 From: Adrian Hoe User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:0.9.4.1) Gecko/20020518 Netscape6/6.2.3 X-Accept-Language: en-us MIME-Version: 1.0 Newsgroups: comp.lang.ada Subject: Re: C's trikery semantic opens up backdoor in new Linux kernel References: <3FB1A63C.9080200@nowhere.com> <8Eisb.14119$hB5.9208@nwrdny02.gnilink.net> <3FB1F484.50705@nowhere.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit NNTP-Posting-Host: 219.95.193.86 X-Original-NNTP-Posting-Host: 219.95.193.86 X-Trace: news.tm.net.my 1068780851 219.95.193.86 (14 Nov 2003 11:34:11 +0800) Organization: TMnet Malaysia Path: archiver1.google.com!news2.google.com!news.maxwell.syr.edu!nntp.abs.net!news-out.cwix.com!newsfeed.cwix.com!news1.tm.net.my Xref: archiver1.google.com comp.lang.ada:2464 Date: 2003-11-14T11:31:04+08:00 List-Id: Wes Groleau wrote: > >> Yeah, = and == make a lot of difference. It supposed to be: >> >> someone == root >> >> but it turned up to be >> >> some = root > > > Correction: it was intended to LOOK LIKE > > someone == root > > but the > > some = root > > was intentional, and the CM mechanism was cheated > to get it in without tracing it to who did it. > > According to my understanding of the article, it was intended like this: if someone == root but the statement was deliberately/mistakenly written like this: if some = root Consider this: int main() { int root = 1; int someone; someone=root; if (someone==root) { printf ("Some is root!\n"); } if (someone=root) { /* this cannot happen in Ada */ printf ("Some has become root!\n"); } } -- Adrian Hoe m a i l b o x AT a d r i a n h o e . c o m