manes@marob.MASA.COM (Steve Manes) (02/02/89)
Here's a bug that I've confirmed on two SCO 2.2 sites running smart
serial boards (or, at least, the Comtrol Smart Hostess and the Arnet,
which were the only boards available for me to test). I've not been
able to duplicate the bug on SCO 2.3 or on 2.2 systems running "dumb"
serial boards.
Basically, if you open another handle on the stdin of a modem port and
then close it, the serial drivers for these boards seem to shut down
stdin altogether and throw you off line immediately. About half the
time (finger-in-the-wind estimate) it will leave the parent shell
running in a blocked condition that re-opens when the next user logs on
that tty port. In others words, this is a dangerous security problem.
I've spoken with Lori Slater at Comtrol and she's on the case.
If you would, compile this program and run it while logged into a modem
port and mail the results to me. I'm curious if this bug repeats itself
on all smart serial boards. Repeat: the bug only appears on modem
ports, not on the console.
---------- cut here ----------- cut here ------------- cut here ---------
#include <stdio.h>
#include <fcntl.h>
char *strlwr();
main()
{
char mytty[25];
int kbfid;
/* First, we open another handle on our raw tty port.
* In SCO, this will be the lowercase device
*/
strcpy(mytty, strlwr(ttyname(1)));
if ((kbfid = open(mytty, O_RDONLY)) == -1) {
/* if this fails, the lowercase port is probably not
* readable by the user (it should be)
*/
perror(mytty);
exit(1);
}
fprintf(stderr, "\nInput device opened -- fid: %d\n", kbfid);
/* Open succeeded.
* Now all we do is close the port we just opened...
*/
fprintf(stderr, "Now closing it...(cringe)\n");
close(kbfid);
/* If you've got the bug, you're history. */
fprintf(stderr, "You're okay!\n");
}
char *strlwr(s)
char *s;
{
int i;
for (i=0; s[i]; i++)
s[i] = tolower(s[i]);
}
--
Steve Manes Roxy Recorders, Inc. Magpie-HQ BBS
UUCP : {rutgers|cmcl2}!hombre!magpie!manes (212)420-0527
Smail: manes@MASA.COMjml@ivory.SanDiego.NCR.COM (Michael Lodman) (02/03/89)
In article <493@marob.MASA.COM> manes@marob.MASA.COM (Steve Manes) writes: >I've spoken with Lori Slater at Comtrol and she's on the case. Lori Slater has done the best job of supporting her product of anyone I've had to deal with at any company. I would highly recommend Comtrol for this reason alone. Michael Lodman (619) 485-3335 Advanced Development NCR Corporation E&M San Diego mike.lodman@ivory.SanDiego.NCR.COM {sdcsvax,cbatt,dcdwest,nosc.ARPA}!ncr-sd!ivory!jml
john@jetson.UPMA.MD.US (John Owens) (02/03/89)
In article <840@ncr-sd.SanDiego.NCR.COM>, jml@ivory.SanDiego.NCR.COM (Michael Lodman) writes: > Lori Slater has done the best job of supporting her product of anyone > I've had to deal with at any company. I would highly recommend Comtrol > for this reason alone. Seconded! She worked with me for a long time on a flow-control problem I was having, and sent me several builds of the drivers to see if they would solve my problem. Now if she were only on the net.... -- John Owens john@jetson.UPMA.MD.US uunet!jetson!john +1 301 249 6000 john%jetson.uucp@uunet.uu.net
howardl@wb3ffv.UUCP ( WB3FFV) (02/06/89)
In article <840@ncr-sd.SanDiego.NCR.COM>, jml@ivory.SanDiego.NCR.COM (Michael Lodman) writes: > > Lori Slater has done the best job of supporting her product of anyone > I've had to deal with at any company. I would highly recommend Comtrol > for this reason alone. Hello, I agree completly with you on the above statement, as she has done a fabulous job on working out any bugs that I have run into so far (and I mean within a week usually, not years like some companys :-(). I have used the Smart Hostess boards under Microport V/386 Release 2.2U and 3.0e, and also under AT&T V/386 Release 3.2, and so far no other board has stood up to the one in my system. Now only if Bell Tech had provided support for there ICC product as well as Comtrol is doing for there Smart Hostess, I might have kept the ICC's I bought many moons ago. Anyway I strongly suggest anybody considering a Smart-Serial Board at least take a look at the Comtrol product, as Lori really does an EXCELENT job!! (As I slip into my FLAME PROOF suit and zip it up! :-) ------------------------------------------------------------------------------- Internet : howardl@wb3ffv.ampr.org | Howard D. Leadmon UUCP : wb3ffv!howardl | Fast Computer Service, Inc. TELEX : 152252474 | P. O. Box 171 Telephone : (301)-335-2206 | Chase, MD 21027-0171