Skip to content
Commit c4bbafda authored by Alan Cox's avatar Alan Cox Committed by Linus Torvalds
Browse files

exec.c: fix coredump to pipe problem and obscure "security hole"



The patch checks for "|" in the pattern not the output and doesn't nail a
pid on to a piped name (as it is a program name not a file)

Also fixes a very very obscure security corner case.  If you happen to have
decided on a core pattern that starts with the program name then the user
can run a program called "|myevilhack" as it stands.  I doubt anyone does
this.

Signed-off-by: default avatarAlan Cox <alan@redhat.com>
Confirmed-by: default avatarChristopher S. Aker <caker@theshore.net>
Cc: <stable@kernel.org>
Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
parent c4b7e875
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment