chiark / gitweb /
~ianmdlvl / elogind.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 16f1239) | patch
util: never follow symlinks in rm_rf_children()
authorMichal Schmidt <mschmidt@redhat.com>
Fri, 2 Mar 2012 09:39:10 +0000 (10:39 +0100)
committerMichal Schmidt <mschmidt@redhat.com>
Fri, 16 Mar 2012 17:33:02 +0000 (18:33 +0100)
commit5ebff5337594d690b322078c512eb222d34aaa82
treefa41ee9d34437f1fcc914f31cff51c6b7808c579tree | snapshot
parent16f1239e1ece27257c0deedcf01aa39474f66241commit | diff
util: never follow symlinks in rm_rf_children()

The function checks if the entry is a directory before recursing, but
there is a window between the check and the open, during which the
directory could be replaced with a symlink.

CVE-2012-1174
https://bugzilla.redhat.com/show_bug.cgi?id=803358
src/util.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.