| 2012-07-06 18:30:14 |
Sergey "Shnatsel" Davidoff |
bug |
|
|
added bug |
| 2012-07-06 18:30:20 |
Sergey "Shnatsel" Davidoff |
scratch: status |
New |
Fix Committed |
|
| 2012-07-06 18:30:33 |
Sergey "Shnatsel" Davidoff |
bug task added |
|
feedler |
|
| 2012-07-06 18:30:44 |
Sergey "Shnatsel" Davidoff |
bug task added |
|
footnote |
|
| 2012-07-06 18:31:03 |
Sergey "Shnatsel" Davidoff |
bug task added |
|
maya |
|
| 2012-07-06 18:31:14 |
Sergey "Shnatsel" Davidoff |
bug task added |
|
midori |
|
| 2012-07-06 18:33:29 |
Sergey "Shnatsel" Davidoff |
description |
Do not use FileUtils.set_contents() also known as g_file_set_contents() for overwriting files, because it resets file permissions to default permissive policy and can potentially expose files that were made private. GIO function document.file.replace_contents() should be used instead.
See http://valadoc.org/#!api=gio-2.0/GLib.File.replace_contents for documentation. There's also replace_contents_async() which can be useful.
An example of transitioning code to that function can be found in http://bazaar.launchpad.net/~elementary-apps/scratch/scratch/revision/782 in Tab.Vala
I'm marking all projects in which I've grepped this function as affected. |
Do not use FileUtils.set_contents() also known as g_file_set_contents() for overwriting files, because it resets file permissions to default permissive policy and can potentially expose files that were made private. GIO function document.file.replace_contents() should be used instead.
See http://valadoc.org/#!api=gio-2.0/GLib.File.replace_contents for documentation. There's also replace_contents_async() which can be useful.
An example of transitioning code to that function can be found in http://bazaar.launchpad.net/~elementary-apps/scratch/scratch/revision/782 in Tab.Vala
I'm marking all projects in which I've grepped either form of this function as affected. |
|
| 2012-07-07 09:45:18 |
Mario Guerriero |
scratch: milestone |
|
luna-beta1 |
|
| 2012-07-07 09:45:26 |
Mario Guerriero |
maya: milestone |
|
0.1-luna-beta1 |
|
| 2012-07-08 07:51:50 |
Sergey "Shnatsel" Davidoff |
description |
Do not use FileUtils.set_contents() also known as g_file_set_contents() for overwriting files, because it resets file permissions to default permissive policy and can potentially expose files that were made private. GIO function document.file.replace_contents() should be used instead.
See http://valadoc.org/#!api=gio-2.0/GLib.File.replace_contents for documentation. There's also replace_contents_async() which can be useful.
An example of transitioning code to that function can be found in http://bazaar.launchpad.net/~elementary-apps/scratch/scratch/revision/782 in Tab.Vala
I'm marking all projects in which I've grepped either form of this function as affected. |
Do not use FileUtils.set_contents() also known as g_file_set_contents() for overwriting files, because it resets file permissions to default permissive policy and can potentially expose files that were made private. Its behavior of creating a new file and substituting the old one with it also makes the older file impossible to shred and makes automated data recovery harder on many filesystems.
GIO function document.file.replace_contents() should be used instead.
See http://valadoc.org/#!api=gio-2.0/GLib.File.replace_contents for documentation. There's also replace_contents_async() which can be useful.
An example of transitioning code to that function can be found in http://bazaar.launchpad.net/~elementary-apps/scratch/scratch/revision/782 in Tab.Vala
I'm marking all projects in which I've grepped either form of this function as affected. |
|
| 2012-07-23 14:57:13 |
Marcus Lundgren |
maya: status |
New |
In Progress |
|
| 2012-07-23 14:57:13 |
Marcus Lundgren |
maya: assignee |
|
Marcus Lundgren (marcus-lundgren) |
|
| 2012-07-23 14:57:43 |
Marcus Lundgren |
branch linked |
|
lp:~marcus-lundgren/maya/fix-1021860 |
|
| 2012-07-23 15:29:22 |
Marcus Lundgren |
feedler: status |
New |
In Progress |
|
| 2012-07-23 15:29:22 |
Marcus Lundgren |
feedler: assignee |
|
Marcus Lundgren (marcus-lundgren) |
|
| 2012-07-23 15:29:40 |
Marcus Lundgren |
branch linked |
|
lp:~marcus-lundgren/feedler/fix-1021860 |
|
| 2012-07-23 16:37:24 |
Marcus Lundgren |
footnote: status |
New |
In Progress |
|
| 2012-07-23 16:37:24 |
Marcus Lundgren |
footnote: assignee |
|
Marcus Lundgren (marcus-lundgren) |
|
| 2012-07-23 16:37:54 |
Marcus Lundgren |
branch linked |
|
lp:~marcus-lundgren/footnote/fix-1021860 |
|
| 2012-07-24 08:27:55 |
Niels Avonds |
maya: status |
In Progress |
Fix Committed |
|
| 2012-08-03 19:32:05 |
Danielle Foré |
scratch: status |
Fix Committed |
Fix Released |
|
| 2012-10-12 03:56:08 |
Danielle Foré |
maya: status |
Fix Committed |
Fix Released |
|
| 2012-11-12 14:46:53 |
Jaap Broekhuizen |
footnote: status |
In Progress |
Fix Committed |
|
| 2012-12-08 12:58:43 |
Cris Dywan |
midori: status |
New |
Fix Committed |
|
| 2012-12-08 12:59:22 |
Cris Dywan |
midori: status |
Fix Committed |
Invalid |
|
| 2013-02-28 17:05:54 |
Marcus Lundgren |
feedler: status |
In Progress |
Fix Committed |
|
| 2013-05-05 05:16:01 |
Daniel Kur |
feedler: importance |
Undecided |
Low |
|
