gspca webcams (video4linux)

[Kees Cook]

On Sun, Oct 12, 2008 at 12:15:16PM +0100, Matt Zimmerman wrote:
> My understanding is that there are two ways to make this work: to preload
> a library which wraps the relevant system calls, or to modify the
> application to use a (trivially) different API.

Correct.

> Which of these are you proposing, and which applications would need to be
> touched in order to fix this for 8.10?

Well, both, really.  Many applications do not yet have patches for the
API swap, so those will need users to do the LD_PRELOAD trick.  All the
other applications get patches.  Now that libv4l is in the archive,
LD_PRELOAD will work, and yesterday I added all the patches for the
major applications (gstreamer, ekiga, etc):
https://bugs.launchpad.net/bugs/260918

-Kees

-- 
Kees Cook
Ubuntu Security Team