diff options
| author | Kaz Kylheku <kaz@kylheku.com> | 2022-07-30 15:29:09 -0700 |
|---|---|---|
| committer | Kaz Kylheku <kaz@kylheku.com> | 2022-07-30 15:29:09 -0700 |
| commit | ffa286c6a8ffe8450aeaa1e2c8cfe1582c99f581 (patch) | |
| tree | 88902b2663323e514b971bd8167af0285c6318cf /testsp.c | |
| parent | aa35108d6f77f56627c0561e4b48361ac298e123 (diff) | |
| download | safepath-master.tar.gz safepath-master.tar.bz2 safepath-master.zip | |
* safepath.c (safepath_check): Reject symbolic links
that have a link count greater than 2. To defeat
this check, the attacker must not only be able to
hard link someone else's symlink into a /tmp-like
directory, but unlink the original. (That could
happen if the user or root have some available symlink
sitting in an unsecured directory.)
Diffstat (limited to 'testsp.c')
0 files changed, 0 insertions, 0 deletions