[GHC] #5741: openFile should fail if null bytes are in the argument

GHC cvs-ghc at haskell.org
Tue Jan 3 09:16:42 CET 2012


#5741: openFile should fail if null bytes are in the argument
-------------------------------------+--------------------------------------
 Reporter:  Veinor                   |          Owner:                  
     Type:  feature request          |         Status:  new             
 Priority:  normal                   |      Component:  libraries/base  
  Version:  7.2.1                    |       Keywords:                  
       Os:  Unknown/Multiple         |   Architecture:  Unknown/Multiple
  Failure:  Runtime performance bug  |       Testcase:                  
Blockedby:                           |       Blocking:                  
  Related:                           |  
-------------------------------------+--------------------------------------
 If the argument to openFile contains a null byte, right now it silently
 truncates everything after the null byte. This could lead to a
 vulnerability if the programmer relies on the presence of an extension
 such as ".cfg" to prevent people from reading in, say, /etc/passwd.

-- 
Ticket URL: <http://hackage.haskell.org/trac/ghc/ticket/5741>
GHC <http://www.haskell.org/ghc/>
The Glasgow Haskell Compiler



More information about the Glasgow-haskell-bugs mailing list