bugThe GNU Hurd - Bugs: bug #17133, design bug: ``.. resolution in...

 
 

bug #17133: design bug: ``.. resolution in translators''

Submitted by:  Thomas Schwinge <tschwinge>
Submitted on:  Mon 17 Jul 2006 09:46:00 AM UTC  
 
Category:  Hurd Interfaces Severity:  3 - Normal
Priority:  5 - Normal Item Group:  None
Status:  None Privacy:  Public
Assigned to:  None Originator Name: 
Open/Closed:  Open Reproducibility:  None
Size (loc):  None Planned Release:  None
Effort:  0.00
Wiki-like text discussion box: 

We should start thinking about getting rid of ".." resolution in the translators, providing a convenient replacement in libc which would work with simple string operations.

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Mon 17 Jul 2006 09:46:00 AM UTC, original submission:

12:48 <neal> I have a nice new attack.
12:49 <neal> chroot /chroot
12:49 <neal> set an active translator on foo
12:49 <neal> cause a program which is not in the chroot to use foo
12:50 <neal> with a path resembling: "/chroot/foo/../../.."
12:50 <neal> if the program uses open, it will open "/chroot"
12:50 <neal> and NOT /
12:50 <neal> the reason?
12:51 <neal> when the active translator on /chroot/foo returns the retry capability on /chroot/foo, the capability is rooted at /chroot
12:52 <neal> transitively due to the file_reparent that chroot does
12:52 <neal> that's a design bug
12:54 <neal> abeaumont: I mean, it's not a bug which can be fixed
12:54 <neal> abeaumont: I means getting rid of .. resolution in translators

Thomas Schwinge <tschwinge>
Project Administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by k0ro (Updated the item)
  •  

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

     

     

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2010-04-29 k0ro Wiki-like text discussion box => We should start thinking about getting rid of ".." resolution in the translators, providing a convenient replacement in libc which would work with simple string operations.

    Back to the top


    Powered by Savane 3.3