From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Lars Magne Ingebrigtsen Newsgroups: gmane.emacs.bugs Subject: bug#4291: 23.1; doc-view-mode temporary directory vulnerable to denial of service Date: Tue, 12 Jul 2011 23:18:43 +0200 Message-ID: References: <1x7hwk3gis.fsf@fencepost.gnu.org> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: dough.gmane.org 1310507500 28653 80.91.229.12 (12 Jul 2011 21:51:40 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Tue, 12 Jul 2011 21:51:40 +0000 (UTC) Cc: David Bremner , 4291@debbugs.gnu.org To: Stefan Monnier Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Tue Jul 12 23:51:36 2011 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([140.186.70.17]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Qgkrg-00064c-4H for geb-bug-gnu-emacs@m.gmane.org; Tue, 12 Jul 2011 23:51:36 +0200 Original-Received: from localhost ([::1]:42333 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Qgkrf-0006hG-Bv for geb-bug-gnu-emacs@m.gmane.org; Tue, 12 Jul 2011 17:51:35 -0400 Original-Received: from eggs.gnu.org ([140.186.70.92]:53308) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1QgkNG-0007bL-QW for bug-gnu-emacs@gnu.org; Tue, 12 Jul 2011 17:20:14 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1QgkNB-0006Gc-O8 for bug-gnu-emacs@gnu.org; Tue, 12 Jul 2011 17:20:10 -0400 Original-Received: from debbugs.gnu.org ([140.186.70.43]:60307) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1QgkNB-0006FO-8C for bug-gnu-emacs@gnu.org; Tue, 12 Jul 2011 17:20:05 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.69) (envelope-from ) id 1QgkNA-0004Sk-NR; Tue, 12 Jul 2011 17:20:04 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Lars Magne Ingebrigtsen Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-To: owner@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 12 Jul 2011 21:20:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 4291 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 4291-submit@debbugs.gnu.org id=B4291.131050555317069 (code B ref 4291); Tue, 12 Jul 2011 21:20:04 +0000 Original-Received: (at 4291) by debbugs.gnu.org; 12 Jul 2011 21:19:13 +0000 Original-Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1QgkMG-0004R9-V8 for submit@debbugs.gnu.org; Tue, 12 Jul 2011 17:19:13 -0400 Original-Received: from hermes.netfonds.no ([80.91.224.195]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1QgkM9-0004QV-IW for 4291@debbugs.gnu.org; Tue, 12 Jul 2011 17:19:05 -0400 Original-Received: from cm-84.215.51.58.getinternet.no ([84.215.51.58] helo=quimbies.gnus.org) by hermes.netfonds.no with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1QgkLx-000657-Lt; Tue, 12 Jul 2011 23:18:49 +0200 In-Reply-To: (Stefan Monnier's message of "Mon, 31 Aug 2009 10:55:40 -0400") User-Agent: Gnus/5.110018 (No Gnus v0.18) Emacs/24.0.50 (gnu/linux) X-Now-Playing: Peter Gabriel's _Plays Live (1)_: "D.I.Y." X-Hashcash: 1:23:110712:4291@debbugs.gnu.org::kCn3O3TKLwPd++UE:000000000000000000000000000000000000000006rKY X-Hashcash: 1:23:110712:bremner-dated-1252800134.2fccb3@pivot.cs.unb.ca::fw20F/Kdt7IoBx4w:00000000000000Gyg2 X-Hashcash: 1:23:110712:rgm@gnu.org::cDlCt477RGGyWMH8:000001F79K X-Hashcash: 1:23:110712:monnier@iro.umontreal.ca::wnXn+OB1ax8ujd3w:0000000000000000000000000000000000001Q8fr X-MailScanner-ID: 1QgkLx-000657-Lt MailScanner-NULL-Check: 1311110329.77326@Cro8MRr5yl65AzrHtM96NQ X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list Resent-Date: Tue, 12 Jul 2011 17:20:04 -0400 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 3) X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:48794 Archived-At: Stefan Monnier writes: > IIRC /tmp/docview$uid is predictable because doc-view tries to reuse > previouly-rendered pages. I'm not convinced this is really a good > feature, but obviously the author thought it was important, so I'd > rather not drop it without a discussion. It could just stash the directory name in a variable, and use the normal `make-temp-file' to create the directory, couldn't it? -- (domestic pets only, the antidote for overdose, milk.) bloggy blog http://lars.ingebrigtsen.no/