Age | Commit message (Collapse) | Author | Files | Lines |
|
race conditions associated to files. The big deal is that it is quite typical
to use strings of pathnames to track files. But because that does not leverage
the filesystem would be attackers may be able to exploit time lags in uses
of filesystem functions (like stat and chmod or open) to get files with
suspect data into the files that the applications are working with.
This commit closes that potential hole even though there are no known exploits.
Better safe then sorry. There is no change in the behavior of the apps.
|
|
sync. not functioning until QD 1.7.1 released. should compile for now
|
|
|
|
|
|
the whole cvs is tagged with "before_optimize_connect" if there are problems you
can check the diff (but it had compiled and run here)
|
|
|
|
The base system and all platform independent applications and platforms
should work.
Please see $OPIEDIR/development/macosx for details
|
|
|