This is the mail archive of the libc-alpha@sourceware.org mailing list for the glibc project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: [PATCH] [BZ #18433] Check file access/existence before forking.

From: Mike Frysinger <vapier at gentoo dot org>
To: Navid Rahimi <rahimi dot nv at gmail dot com>
Cc: libc-alpha at sourceware dot org
Date: Fri, 11 Sep 2015 14:22:49 -0400
Subject: Re: [PATCH] [BZ #18433] Check file access/existence before forking.
Authentication-results: sourceware.org; auth=none
References: <55F19819 dot 3010601 at gmail dot com>

doing an access/stat/whatever doesn't solve the issue you described --
as others have pointed out, there's a TOCTOU race, but there's also no
guarantee that doing a stat/access on mode bits means you can actually
execute that file and/or that the exec will succeed.  since this doesn't
actually fix the problem you've described (and others have pointed out
that it's not a spec violation), then this patch as-is is dead.
-mike

Attachment: signature.asc
Description: Digital signature

Follow-Ups:
- Re: [PATCH] [BZ #18433] Check file access/existence before forking.
  - From: navid Rahimi

References:
- [PATCH] [BZ #18433] Check file access/existence before forking.
  - From: Navid Rahimi

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]