This is the mail archive of the gdb-patches@sourceware.org mailing list for the GDB project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: [PATCH] Also install data-directory into the build directory as computed by relocate_gdb_directory

From: Joel Brobecker <brobecker at adacore dot com>
To: Doug Evans <dje at google dot com>
Cc: Khoo Yit Phang <khooyp at cs dot umd dot edu>, Jan Kratochvil <jan dot kratochvil at redhat dot com>, GDB Patches <gdb-patches at sourceware dot org>
Date: Thu, 4 Oct 2012 07:51:06 -0700
Subject: Re: [PATCH] Also install data-directory into the build directory as computed by relocate_gdb_directory
References: <9F52A338-A158-44DC-90C1-F46503859613@cs.umd.edu> <285502C6-1395-4049-9D55-031EDA3AD06D@cs.umd.edu> <20120924170348.GI4146@adacore.com> <CC9CEDC8-8941-43A8-88EA-DAB1B671DD32@cs.umd.edu> <20120927091737.GB2980@adacore.com> <CADPb22Q1a2TJ_bR0yq_wjOua8pBqBsZXvyS2uteX9xKiLuC9kw@mail.gmail.com> <20121004000840.GI3028@adacore.com> <CADPb22TcGqvuxKo5_t8zuwNiJyUL4Yp38zA0OXcX_Dbv9bmyNQ@mail.gmail.com> <20121004013358.GJ3028@adacore.com> <CADPb22Tai7SqB5M=7VWa34UHU6R5mYT6-rFU7GA4e712UmyG3A@mail.gmail.com>

> > I think that this is opening the door for allowing GDB to execute
> > code without the user being aware of it. I'd rather avoid that.
> 
> How so?

Let's say: I build a debugger and install it somewhere, and then
tell my collegues: Hey, use my super-duper GDB. Then, someone hacks
into my account, set things up to put my GDB into a situation where
it will think that it's still in a build directory, and then place
some code in the datadir/python area to auto-execute some malicious
code...

-- 
Joel

Follow-Ups:
- Re: [PATCH] Also install data-directory into the build directory as computed by relocate_gdb_directory
  - From: Doug Evans

References:
- Re: [PATCH] Also install data-directory into the build directory as computed by relocate_gdb_directory
  - From: Doug Evans
- Re: [PATCH] Also install data-directory into the build directory as computed by relocate_gdb_directory
  - From: Joel Brobecker
- Re: [PATCH] Also install data-directory into the build directory as computed by relocate_gdb_directory
  - From: Doug Evans
- Re: [PATCH] Also install data-directory into the build directory as computed by relocate_gdb_directory
  - From: Joel Brobecker
- Re: [PATCH] Also install data-directory into the build directory as computed by relocate_gdb_directory
  - From: Doug Evans

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]