Re: deb vfs security issue (CAN-2004-0494)
- From: Leonard den Ottolander <leonard den ottolander nl>
- To: MC Devel <mc-devel gnome org>
- Subject: Re: deb vfs security issue (CAN-2004-0494)
- Date: Wed, 18 Aug 2004 21:33:28 +0200
On Wed, 2004-08-18 at 18:40, Jakub Jelinek wrote:
> Also, isn't mcdebfs_copyout's destfile not used just in system ()
> (where it should be escaped), but also in
> if ( open(FILEOUT,">$destfile") )
> (where I'd say it should not be escaped)?
Why not there?
Leonard.
--
mount -t life -o ro /dev/dna /genetic/research
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]