Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-91128

QTemporaryDir does not have a way to create secure direrctories

    XMLWordPrintable

Details

    • Suggestion
    • Resolution: Fixed
    • P2: Important
    • 6.3.0 Alpha
    • 6.0
    • Core: I/O
    • None
    • All
    • b9be035c6268ed5359213de8baacbd5e9f4c5f37

    Description

      When you create a QTemporaryDir, it is always created with 0777 permissions (minus umask), so it's impossible to create a secure directory. Even if you chmod the direrctory right after creation, there's a small window of opportunity for an attacker to open() it or chdir() into it.

      Attachments

        Issue Links

          relates to

          User Story - Created by Jira Software - do not edit or delete. Issue type for a user story. QTBUG-79750 Add an optional mode argument to QDir::mkdir(name [, mode]), QFile::open(...)

          • P2: Important - Urgent, should be fixed, but will not stop the release.
          • Closed
          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              Unassigned Unassigned
              piotrmi Piotr Mikolajczyk
              Vladimir Minenko Vladimir Minenko
              Alex Blasche Alex Blasche
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes