Execution of custom judges should be secure

Bug #1206315 reported by Alex Li
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
PEG Judge
Confirmed
High
Unassigned

Bug Description

If a custom checker runs into an infinite loop, the judge will run that submission forever. "The grader should be sandboxed, otherwise it's an attack vector for problem setters."

Alex Li (alextrovert)
description: updated
Revision history for this message
Brian Bi (bbi5291) wrote :

Problem setting functionality hasn't been fully implemented now so this is not actually a 0day. It will be fixed before it goes live.

Changed in peg-judge:
status: New → Confirmed
information type: Private Security → Private
information type: Private → Public Security
Brian Bi (bbi5291)
summary: - Checker on Infinite Loop Stalls Judge Forever
+ Execution of custom judges should be secure
Changed in peg-judge:
importance: Undecided → High
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.