[PATCH] Also install data-directory into the build directory as computed by relocate_gdb_directory

Joel Brobecker brobecker@adacore.com
Thu Oct 4 14:51:00 GMT 2012


> > I think that this is opening the door for allowing GDB to execute
> > code without the user being aware of it. I'd rather avoid that.
> 
> How so?

Let's say: I build a debugger and install it somewhere, and then
tell my collegues: Hey, use my super-duper GDB. Then, someone hacks
into my account, set things up to put my GDB into a situation where
it will think that it's still in a build directory, and then place
some code in the datadir/python area to auto-execute some malicious
code...

-- 
Joel



More information about the Gdb-patches mailing list