| To: | pcp@xxxxxxxxxxx |
|---|---|
| Subject: | [Bug 1061] mmv pmda sensitive to TOCTOU for shmem metadata extraction |
| From: | bugzilla-daemon@xxxxxxxxxxx |
| Date: | Tue, 21 Jun 2016 23:55:59 +0000 |
| Auto-submitted: | auto-generated |
| Delivered-to: | pcp@xxxxxxxxxxx |
| In-reply-to: | <bug-1061-835@xxxxxxxxxxxxxxxx/bugzilla/> |
| References: | <bug-1061-835@xxxxxxxxxxxxxxxx/bugzilla/> |
Nathan Scott
changed
bug 1061
Comment # 1
on bug 1061
from Nathan Scott
mmv_stats_init(3) unlinks and securely re-creates the mmv stats file on each invocation, and always has. So, the hypothetical issue described here cannot ever have happened in the real world. One of the dangers of opening bugs from just browsing code I guess. Worth mentioning again that reproducible test cases are also a Good Thing (TM). You are receiving this mail because:
|
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [Bug 1062] mmv pmda sensitive to malevolent data, bugzilla-daemon |
|---|---|
| Next by Date: | Re: [pcp] Python PMAPI: Allow setting local context, Nathan Scott |
| Previous by Thread: | [Bug 1062] mmv pmda sensitive to malevolent data, bugzilla-daemon |
| Next by Thread: | [Bug 1289910] RFE: Python PMAPI support for Python client -g / -p options, bugzilla |
| Indexes: | [Date] [Thread] [Top] [All Lists] |