lkml.org 
[lkml]   [1998]   [Oct]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: [patch] Re: [PATCH] modules_install
Date
> +	TMPDIR="/tmp/kernel.tmp.$$$$"; \
> + rm -rf $$TMPDIR; \

What if this is a symlink ????
> + umask 022; \
> + mkdir $$TMPDIR; \
> + if [ $$? -ne 0 ]; then \
> + echo "$0: Can't create temp dir $$TMPDIR, exiting..."; \
> + exit 1; \
> + fi; \

And this is a denial of service attack

Just back the patch out. Its a complete turkey. If you want to fix it
you need additional tools like mktemp which not all distributions include




-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:44    [from the cache]
©2003-2011 Jasper Spaans