Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-91128

QTemporaryDir does not have a way to create secure direrctories

XMLWordPrintable

    • Icon: Suggestion Suggestion
    • Resolution: Fixed
    • Icon: P2: Important P2: Important
    • 6.3.0 Alpha
    • 6.0
    • Core: I/O
    • None
    • All
    • b9be035c6268ed5359213de8baacbd5e9f4c5f37

      When you create a QTemporaryDir, it is always created with 0777 permissions (minus umask), so it's impossible to create a secure directory. Even if you chmod the direrctory right after creation, there's a small window of opportunity for an attacker to open() it or chdir() into it.

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

            Unassigned Unassigned
            piotrmi Piotr Mikolajczyk
            Vladimir Minenko Vladimir Minenko
            Alex Blasche Alex Blasche
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved:

                There are no open Gerrit changes