Developer fixes 33-year-old Unix bug
An OpenBSD developer has discovered and fixed a bug in the software that has been traced back to an AT&T version of Unix from 1975.
OpenBSD is a variant of the Berkeley Software Distribution (BSD), a widely used, open-source, Unix-like operating system. BSD's variants include OpenBSD, FreeBSD and NetBSD, and it forms the basis of Apple's Mac OS X operating system.
The latest bug, which affected the yacc parser generator, followed the May discovery of a BSD flaw that was 25 years old.
Otto Moerbeek, an OpenBSD developer, found the bug through the process of testing a new implementation of malloc, a general purpose memory allocator. A user alerted him that on the Sparc64 hardware platform and using the new malloc, compiling large C++ projects would sometimes fail with an internal compiler error.
He found that the bug was in yacc, a parser generator developed by Stephen C. Johnson at AT&T that has been a standard part of Unix since the 1970s.
"Funny thing is that I traced this back to Sixth Edition Unix, released in 1975," Moerbeek wrote in a note describing the bug.
The new malloc was able to trigger the bug because its new features give it a better chance of catching buffer overflows, Moerbeek said. He noted that the bug is only triggered on Sparc64 systems.
In May, Marc Balmer, a Swiss developer closely involved with OpenBSD, found a 25-year-old flaw that proved to exist in all BSD variants including derivatives such as Mac OS X.
Commentators on IT enthusiast websites noted that 1975 is not long after the very beginning of the Unix universe, at least according to the system time used in Unix-like dating systems, which count time in seconds starting at 00:00:00 1 January, 1970.
» posted by ITworld staff
Techworld.com
Symantec Backup Exec 12 and Backup Exec System Recovery 8 deliver industry leading Windows data protection and system recovery. Download this whitepaper to find out the top reasons to upgrade and how to get continuous data protection and complete system recovery.
Data and system loss — from a hard drive failure, malicious attack, natural disaster, or simple human error — can happen anytime. Don’t leave your business vulnerable. Make sure you have a secure recovery strategy in place. Symantec's latest backup and system recovery technology can efficiently restore critical applications, individual emails and documents and even restore your entire system in minutes in the event of a loss.
Businesses face a growing challenge to ensure that the IT environment is properly protected. Backup Exec 12 integrates with other applications in the Symantec family of products, to complement your current data protection strategy, keep your data securely backed up and make it recoverable when you need it most.
Crimeware: Understanding New Attacks and Defenses
By Markus Jakobsson, Zulfikar Ramzan
Published Apr 6, 2008 by Addison-Wesley Professional. Part of the Symantec Press series.
Enter now! | Official rules | Sample chapter
Securing VoIP Networks: Threats, Vulnerabilities, and Countermeasures
By Peter Thermos, Ari Takanen
Published Aug 1, 2007 by Addison-Wesley Professional.
Enter now! | Official rules | Sample chapter
great developer!
great developer!I'm not sure about BSD, but
I'm not sure about BSD, but what is it they say about Windows? For every bug fixed two more are created. So it would not really matter if a bug takes 33 years to fix.Fixing a bug with origins
Fixing a bug with origins that old is very cool. But this is not a UNIX bug, it is a bug in yacc. Calling it a UNIX bug is misleading and factually incorrect. There are many (most?) UNIX systems that don't ever run yacc. And most modern versions, or even LINUX distributions, don't install it by default anymore.