GNU bug report logs - #18679
gzip-1.6 tests/unpack-invalid may override user file in /tmp

Previous Next

Package: gzip;

Reported by: Kiyoshi KANAZAWA <yoi_no_myoujou <at> yahoo.co.jp>

Date: Fri, 10 Oct 2014 13:18:02 UTC

Severity: normal

Done: Paul Eggert <eggert <at> cs.ucla.edu>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 18679 in the body.
You can then email your comments to 18679 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to bug-gzip <at> gnu.org:
bug#18679; Package gzip. (Fri, 10 Oct 2014 13:18:02 GMT) Full text and rfc822 format available.
Acknowledgement sent to Kiyoshi KANAZAWA <yoi_no_myoujou <at> yahoo.co.jp>:
New bug report received and forwarded. Copy sent to bug-gzip <at> gnu.org. (Fri, 10 Oct 2014 13:18:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Kiyoshi KANAZAWA <yoi_no_myoujou <at> yahoo.co.jp>
To: "bug-gzip <at> gnu.org" <bug-gzip <at> gnu.org>
Subject: gzip-1.6 tests/unpack-invalid may override user file in /tmp
Date: Fri, 10 Oct 2014 22:16:46 +0900 (JST)

[Message part 1 (text/plain, inline)]
Hello,

In file "tests/unpack-invalid", line 29
"if gzip -d <in >/tmp/out 2>/tmp/err; then"

User may be using the same file: /tmp/out & /tmp/err.
They should be created in tests directory.


--- Kiyoshi <yoi_no_myoujou <at> yahoo.co.jp>

[Message part 2 (text/html, inline)]
Reply sent to Paul Eggert <eggert <at> cs.ucla.edu>:
You have taken responsibility. (Fri, 10 Oct 2014 18:44:02 GMT) Full text and rfc822 format available.
Notification sent to Kiyoshi KANAZAWA <yoi_no_myoujou <at> yahoo.co.jp>:
bug acknowledged by developer. (Fri, 10 Oct 2014 18:44:03 GMT) Full text and rfc822 format available.

Message #10 received at 18679-done <at> debbugs.gnu.org (full text, mbox):

From: Paul Eggert <eggert <at> cs.ucla.edu>
To: Kiyoshi KANAZAWA <yoi_no_myoujou <at> yahoo.co.jp>, 18679-done <at> debbugs.gnu.org
Subject: Re: bug#18679: gzip-1.6 tests/unpack-invalid may override user file
 in /tmp
Date: Fri, 10 Oct 2014 11:43:21 -0700

[Message part 1 (text/plain, inline)]
Kiyoshi KANAZAWA wrote:

> They should be created in tests directory.

Thanks; I pushed the attached to fix that.

[0001-tests-use-local-dir-for-output.patch (text/plain, attachment)]
Information forwarded to bug-gzip <at> gnu.org:
bug#18679; Package gzip. (Fri, 10 Oct 2014 20:06:01 GMT) Full text and rfc822 format available.

Message #13 received at 18679 <at> debbugs.gnu.org (full text, mbox):

From: Jim Meyering <jim <at> meyering.net>
To: 18679 <at> debbugs.gnu.org, Paul Eggert <eggert <at> cs.ucla.edu>,
 yoi_no_myoujou <at> yahoo.co.jp
Subject: Re: bug#18679: gzip-1.6 tests/unpack-invalid may override user file
 in /tmp
Date: Fri, 10 Oct 2014 13:04:38 -0700

On Fri, Oct 10, 2014 at 11:43 AM, Paul Eggert <eggert <at> cs.ucla.edu> wrote:
> Kiyoshi KANAZAWA wrote:
>
>> They should be created in tests directory.

Ouch.  Thank you for catching that.
bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Sat, 08 Nov 2014 12:24:04 GMT) Full text and rfc822 format available.
This bug report was last modified 10 years and 224 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.