Skip to content
Snippets Groups Projects
Commit 03ff880e authored by Matthieu Herrb's avatar Matthieu Herrb Committed by Julien Cristau
Browse files

Fix CVE-2011-4029: File permission change vulnerability.


Use fchmod() to change permissions of the lock file instead
of chmod(), thus avoid the race that can be exploited to set
a symbolic link to any file or directory in the system.

Signed-off-by: default avatarMatthieu Herrb <matthieu.herrb@laas.fr>
Reviewed-by: default avatarAlan Coopersmith <alan.coopersmith@oracle.com>
(cherry picked from commit b67581cf)
(cherry picked from commit 12f65819)
parent 3394ae37
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment