This is the mail archive of the gdb-patches@sourceware.org mailing list for the GDB project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: [PATCH 2/2] Try to initialize data-directory by first searching for "data-directory" in the same directory as the gdb binary


> That's not what I meant.  I don't see how using absolute file names is
> safer than using file names computed from relative file names.

You're right - it's not a great deal safer than with relative file
names. At least there is only one directory from which GDB is
susceptible to attack. But the possibility still exists, and probably
a simple "string" program can find the right location.

The latest proposal of installing a copy of the share directory
at the location where GDB would look for them is fairly clever
that way, since it does not open a new door. And since it was proposed,
I know I've seen this approach used in other projects as well.

-- 
Joel


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]