Hi,

here's a port for liboping, an optional dependency of collectd, written
by collectd's author - its a bit similar to fping, and provides perl
bindings in a subpackage. See http://verplant.org/liboping/.

Like fping, it wants to be installed setuid root to open raw sockets - i
havent done so in pkg/PLIST, awaiting feedback from anyone who wants to
look at the code. We have _POSIX_SAVED_IDS, so it drops/regains
privileges when needed. See
http://git.verplant.org/?p=liboping.git;a=blob;f=src/oping.c;h=d53edd87ffc2285e34fc7567e83ff4889fcf3dcd;hb=HEAD#l1205

There's been a cve 4 or 5 years ago that got promptly fixed (see
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=548684), and looking
at the code it doesnt look *horrible*. the 'read hosts to ping from a file'
uses sscanf with a fixed-size buffer, so that means hostnames longer
that 256 chars might be truncated..

Comments ? Should we make it setuid root or not ?

Landry

Attachment: liboping-1.7.0.tgz
Description: application/tar-gz

Reply via email to