chiark / gitweb /
~ianmdlvl / elogind.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (from: 5ebff53)
util: never follow symlinks in rm_rf_children()
authorMichal Schmidt <mschmidt@redhat.com>
Fri, 2 Mar 2012 09:39:10 +0000 (10:39 +0100)
committerMichal Schmidt <mschmidt@redhat.com>
Fri, 16 Mar 2012 17:33:02 +0000 (18:33 +0100)
The function checks if the entry is a directory before recursing, but
there is a window between the check and the open, during which the
directory could be replaced with a symlink.

CVE-2012-1174
https://bugzilla.redhat.com/show_bug.cgi?id=803358


No differences found
Unnamed repository; edit this file 'description' to name the repository.