Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-91128

QTemporaryDir does not have a way to create secure direrctories

    XMLWordPrintable

    Details

    • Type: Suggestion
    • Status: Reported
    • Priority: P2: Important
    • Resolution: Unresolved
    • Affects Version/s: 6.0
    • Fix Version/s: None
    • Component/s: Core: I/O
    • Labels:
      None
    • Platform/s:
      All

      Description

      When you create a QTemporaryDir, it is always created with 0777 permissions (minus umask), so it's impossible to create a secure directory. Even if you chmod the direrctory right after creation, there's a small window of opportunity for an attacker to open() it or chdir() into it.

        Attachments

          Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

            Activity

              People

              Assignee:
              heimrich Karsten Heimrich
              Reporter:
              piotrmi Piotr Mikolajczyk
              PM Owner:
              Vladimir Minenko Vladimir Minenko
              RnD Owner:
              Alex Blasche Alex Blasche
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Dates

                Created:
                Updated:

                  Gerrit Reviews

                  There are no open Gerrit changes