]> err.no Git - systemd/commit
projects / systemd / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: dc748cb) | patch
util: never follow symlinks in rm_rf_children()
authorMichal Schmidt <mschmidt@redhat.com>
Fri, 2 Mar 2012 09:39:10 +0000 (10:39 +0100)
committerTollef Fog Heen <tfheen@err.no>
Mon, 2 Apr 2012 18:45:54 +0000 (20:45 +0200)
commit693ce213e6af47518eb7827cebd150c4e788450b
treefa41ee9d34437f1fcc914f31cff51c6b7808c579tree | snapshot
parentdc748cb2464da4d1b453c4817712f13a5d57b905commit | diff
util: never follow symlinks in rm_rf_children()

The function checks if the entry is a directory before recursing, but
there is a window between the check and the open, during which the
directory could be replaced with a symlink.

CVE-2012-1174
https://bugzilla.redhat.com/show_bug.cgi?id=803358
src/util.c diff | blob | history
systemd, git://git.err.no/systemd