bugThe GNU Hurd - Bugs: bug #17133, design bug: ``.. resolution in...

 
 

bug #17133: design bug: ``.. resolution in translators''

Submitted by:  Thomas Schwinge <tschwinge>
Submitted on:  Mon 17 Jul 2006 09:46:00 AM UTC  
 
Category: Hurd InterfacesSeverity: 3 - Normal
Priority: 5 - NormalItem Group: None
Status: NonePrivacy: Public
Assigned to: NoneOriginator Name: 
Open/Closed: OpenReproducibility: None
Size (loc): NonePlanned Release: None
Effort: 0.00
Wiki-like text discussion box: 

We should start thinking about getting rid of ".." resolution in the translators, providing a convenient replacement in libc which would work with simple string operations.

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Mon 17 Jul 2006 09:46:00 AM UTC, original submission:

12:48 <neal> I have a nice new attack.
12:49 <neal> chroot /chroot
12:49 <neal> set an active translator on foo
12:49 <neal> cause a program which is not in the chroot to use foo
12:50 <neal> with a path resembling: "/chroot/foo/../../.."
12:50 <neal> if the program uses open, it will open "/chroot"
12:50 <neal> and NOT /
12:50 <neal> the reason?
12:51 <neal> when the active translator on /chroot/foo returns the retry capability on /chroot/foo, the capability is rooted at /chroot
12:52 <neal> transitively due to the file_reparent that chroot does
12:52 <neal> that's a design bug
12:54 <neal> abeaumont: I mean, it's not a bug which can be fixed
12:54 <neal> abeaumont: I means getting rid of .. resolution in translators

Thomas Schwinge <tschwinge>
Project Administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by k0ro (Updated the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follows 1 latest change.

    Date Changed By Updated Field Previous Value => Replaced By
    Thu 29 Apr 2010 04:38:09 PM UTCk0roWiki-like text discussion box=>We should start thinking about getting rid of ".." resolution in the translators, providing a convenient replacement in libc which would work with simple string operations.

    Back to the top


    Powered by Savane 3.1-cleanup