Trojan Horses

[Dan Bernstein]

In article <1885 at necisa.ho.necisa.oz> boyd at necisa.ho.necisa.oz (Boyd Roberts) writes:
> Always, always, always check the return values of system calls.

Of course. I check for every error I know how to handle. I put /*XXX*/
when there may be errors that I can't handle.

> It something has an error return you
> _must_ check for it.

And if something is not documented as returning error X, and there's no
logical reason to expect it to, and there's no good way to handle the
error if it does come up?

> Did it check what setuid() and setgid() returned?  How many of
> you check what those two return?  Anyone?

I do. See the pty source. You were saying?

---Dan