public inbox for gcc-bugs@sourceware.org
help / color / mirror / Atom feed
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
@ 2006-07-12 14:50 ` marcus at jet dot franken dot de
  2006-07-12 14:55 ` marcus at jet dot franken dot de
                   ` (18 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: marcus at jet dot franken dot de @ 2006-07-12 14:50 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #1 from marcus at jet dot franken dot de  2006-07-12 14:50 -------
Created an attachment (id=11868)
 --> (http://gcc.gnu.org/bugzilla/attachment.cgi?id=11868&action=view)
cups.jar

sample file with ../ paths inside.


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359]  New: fastjar directory traversal problem
@ 2006-07-12 14:50 marcus at jet dot franken dot de
  2006-07-12 14:50 ` [Bug fastjar/28359] " marcus at jet dot franken dot de
                   ` (19 more replies)
  0 siblings, 20 replies; 21+ messages in thread
From: marcus at jet dot franken dot de @ 2006-07-12 14:50 UTC (permalink / raw)
  To: gcc-bugs

fastjar contains the following security problem:

When a JAR archive is extracted with filenames with "../" inside, it can
extract files outside of the current directory (a so called directory
traversal).

Unconspicious users unpacking such files could overwrite their own files,
or even system files when being root.

I am attaching a sample "cups.jar" from an earlier CUPS tarball, which exposes
this problem.


-- 
           Summary: fastjar directory traversal problem
           Product: gcc
           Version: 4.1.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: fastjar
        AssignedTo: unassigned at gcc dot gnu dot org
        ReportedBy: marcus at jet dot franken dot de


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
  2006-07-12 14:50 ` [Bug fastjar/28359] " marcus at jet dot franken dot de
@ 2006-07-12 14:55 ` marcus at jet dot franken dot de
  2006-07-12 15:08 ` rguenth at gcc dot gnu dot org
                   ` (17 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: marcus at jet dot franken dot de @ 2006-07-12 14:55 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #2 from marcus at jet dot franken dot de  2006-07-12 14:54 -------
Created an attachment (id=11869)
 --> (http://gcc.gnu.org/bugzilla/attachment.cgi?id=11869&action=view)
fix.patch

i would propose this patch to fix this problem.


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
  2006-07-12 14:50 ` [Bug fastjar/28359] " marcus at jet dot franken dot de
  2006-07-12 14:55 ` marcus at jet dot franken dot de
@ 2006-07-12 15:08 ` rguenth at gcc dot gnu dot org
  2006-07-12 15:14 ` rguenth at gcc dot gnu dot org
                   ` (16 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: rguenth at gcc dot gnu dot org @ 2006-07-12 15:08 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #3 from rguenth at gcc dot gnu dot org  2006-07-12 15:08 -------
Confirmed.


-- 

rguenth at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |rguenth at gcc dot gnu dot
                   |                            |org
             Status|UNCONFIRMED                 |NEW
     Ever Confirmed|0                           |1
   Last reconfirmed|0000-00-00 00:00:00         |2006-07-12 15:08:16
               date|                            |


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (2 preceding siblings ...)
  2006-07-12 15:08 ` rguenth at gcc dot gnu dot org
@ 2006-07-12 15:14 ` rguenth at gcc dot gnu dot org
  2006-07-12 15:19 ` rguenth at gcc dot gnu dot org
                   ` (15 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: rguenth at gcc dot gnu dot org @ 2006-07-12 15:14 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #4 from rguenth at gcc dot gnu dot org  2006-07-12 15:14 -------
Created an attachment (id=11870)
 --> (http://gcc.gnu.org/bugzilla/attachment.cgi?id=11870&action=view)
different fix


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (3 preceding siblings ...)
  2006-07-12 15:14 ` rguenth at gcc dot gnu dot org
@ 2006-07-12 15:19 ` rguenth at gcc dot gnu dot org
  2006-07-12 16:57 ` pinskia at gcc dot gnu dot org
                   ` (14 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: rguenth at gcc dot gnu dot org @ 2006-07-12 15:19 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #5 from rguenth at gcc dot gnu dot org  2006-07-12 15:19 -------
I have applied the 2nd fix to the upstream (savannah) fastjar CVS.


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (4 preceding siblings ...)
  2006-07-12 15:19 ` rguenth at gcc dot gnu dot org
@ 2006-07-12 16:57 ` pinskia at gcc dot gnu dot org
  2006-07-12 17:48 ` rguenth at gcc dot gnu dot org
                   ` (13 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: pinskia at gcc dot gnu dot org @ 2006-07-12 16:57 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #6 from pinskia at gcc dot gnu dot org  2006-07-12 16:57 -------
Fastjar no longer is included with GCC so closing as will not fix.


-- 

pinskia at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (5 preceding siblings ...)
  2006-07-12 16:57 ` pinskia at gcc dot gnu dot org
@ 2006-07-12 17:48 ` rguenth at gcc dot gnu dot org
  2006-07-12 18:30 ` marcus at jet dot franken dot de
                   ` (12 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: rguenth at gcc dot gnu dot org @ 2006-07-12 17:48 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #7 from rguenth at gcc dot gnu dot org  2006-07-12 17:47 -------
Well... maybe the RM has an opinion on this.


-- 

rguenth at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mmitchel at gcc dot gnu dot
                   |                            |org


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (6 preceding siblings ...)
  2006-07-12 17:48 ` rguenth at gcc dot gnu dot org
@ 2006-07-12 18:30 ` marcus at jet dot franken dot de
  2006-07-13  5:04 ` mmitchel at gcc dot gnu dot org
                   ` (11 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: marcus at jet dot franken dot de @ 2006-07-12 18:30 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #8 from marcus at jet dot franken dot de  2006-07-12 18:30 -------
yes, this could still be fixed for release branches ;)


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (7 preceding siblings ...)
  2006-07-12 18:30 ` marcus at jet dot franken dot de
@ 2006-07-13  5:04 ` mmitchel at gcc dot gnu dot org
  2006-07-13  7:39 ` rguenth at gcc dot gnu dot org
                   ` (10 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: mmitchel at gcc dot gnu dot org @ 2006-07-13  5:04 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #9 from mmitchel at gcc dot gnu dot org  2006-07-13 05:04 -------
There's certainly no reason not to fix this on release branches.


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (8 preceding siblings ...)
  2006-07-13  5:04 ` mmitchel at gcc dot gnu dot org
@ 2006-07-13  7:39 ` rguenth at gcc dot gnu dot org
  2006-07-13  7:40 ` rguenth at gcc dot gnu dot org
                   ` (9 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: rguenth at gcc dot gnu dot org @ 2006-07-13  7:39 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #10 from rguenth at gcc dot gnu dot org  2006-07-13 07:39 -------
Reopening then...


-- 

rguenth at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|WONTFIX                     |


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (9 preceding siblings ...)
  2006-07-13  7:39 ` rguenth at gcc dot gnu dot org
@ 2006-07-13  7:40 ` rguenth at gcc dot gnu dot org
  2006-07-17 12:21 ` jakub at redhat dot com
                   ` (8 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: rguenth at gcc dot gnu dot org @ 2006-07-13  7:40 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #11 from rguenth at gcc dot gnu dot org  2006-07-13 07:40 -------
...to assign myself.


-- 

rguenth at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|unassigned at gcc dot gnu   |rguenth at gcc dot gnu dot
                   |dot org                     |org
             Status|REOPENED                    |ASSIGNED
   Last reconfirmed|2006-07-12 15:08:16         |2006-07-13 07:40:04
               date|                            |


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (10 preceding siblings ...)
  2006-07-13  7:40 ` rguenth at gcc dot gnu dot org
@ 2006-07-17 12:21 ` jakub at redhat dot com
  2006-07-17 12:25 ` marcus at jet dot franken dot de
                   ` (7 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: jakub at redhat dot com @ 2006-07-17 12:21 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #12 from jakub at redhat dot com  2006-07-17 12:21 -------
The patch in #4 is insufficient.  Consider paths like ././../.././../etc/passwd
which satisfies the depth tests, yet clearly escapes the current dir tree.
Another question is about symlinks, if there is a foo -> ../../../../etc
symlink in the current tree, then I believe fastjar will happily store
foo/passwd into ../../../../etc/passwd, is that something that can be declared
as user's fault or should fastjar always canonicalize the filename and don't
allow leaving the current directory tree in any way?


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (11 preceding siblings ...)
  2006-07-17 12:21 ` jakub at redhat dot com
@ 2006-07-17 12:25 ` marcus at jet dot franken dot de
  2006-07-17 13:57 ` rguenth at gcc dot gnu dot org
                   ` (6 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: marcus at jet dot franken dot de @ 2006-07-17 12:25 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #13 from marcus at jet dot franken dot de  2006-07-17 12:25 -------
CVE-2006-3619


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (12 preceding siblings ...)
  2006-07-17 12:25 ` marcus at jet dot franken dot de
@ 2006-07-17 13:57 ` rguenth at gcc dot gnu dot org
  2006-07-17 14:04 ` rguenth at gcc dot gnu dot org
                   ` (5 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: rguenth at gcc dot gnu dot org @ 2006-07-17 13:57 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #14 from rguenth at gcc dot gnu dot org  2006-07-17 13:57 -------
Indeed.  Now for symlinks it is only a problem if you can package them like

 foo -> ../../
 foo/x

i.e., if uncompressing a zip archive can _create_ symlinks.  On unix it can,
but it seems to "defer" their creation.

Archive:  ../t.zip
   creating: b/
    linking: b/foo                   -> ../ 
checkdir error:  b/foo exists but is not directory
                 unable to process b/foo/bar.
finishing deferred symbolic links:
  b/foo                  -> ../


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (13 preceding siblings ...)
  2006-07-17 13:57 ` rguenth at gcc dot gnu dot org
@ 2006-07-17 14:04 ` rguenth at gcc dot gnu dot org
  2006-08-05  9:27 ` doko at gcc dot gnu dot org
                   ` (4 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: rguenth at gcc dot gnu dot org @ 2006-07-17 14:04 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #15 from rguenth at gcc dot gnu dot org  2006-07-17 14:03 -------
Created an attachment (id=11904)
 --> (http://gcc.gnu.org/bugzilla/attachment.cgi?id=11904&action=view)
fixed patch

Version of the patch that doesn't count "." parts in the filename as depth.


-- 

rguenth at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #11870|0                           |1
        is obsolete|                            |


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (14 preceding siblings ...)
  2006-07-17 14:04 ` rguenth at gcc dot gnu dot org
@ 2006-08-05  9:27 ` doko at gcc dot gnu dot org
  2006-08-05  9:43 ` doko at gcc dot gnu dot org
                   ` (3 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: doko at gcc dot gnu dot org @ 2006-08-05  9:27 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #16 from doko at gcc dot gnu dot org  2006-08-05 09:27 -------
Subject: Bug 28359

Author: doko
Date: Sat Aug  5 09:27:11 2006
New Revision: 115945

URL: http://gcc.gnu.org/viewcvs?root=gcc&view=rev&rev=115945
Log:
        PR fastjar/28359 / CVE-2006-3619

        2006-07-17  Richard Guenther  <rguenther@suse.de>
        * jartool.c (extract_jar): Do not allow directory traversal
        to parents of the extraction root.

Modified:
    branches/gcc-4_1-branch/fastjar/ChangeLog
    branches/gcc-4_1-branch/fastjar/jartool.c


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (15 preceding siblings ...)
  2006-08-05  9:27 ` doko at gcc dot gnu dot org
@ 2006-08-05  9:43 ` doko at gcc dot gnu dot org
  2006-08-11 19:46 ` rguenth at gcc dot gnu dot org
                   ` (2 subsequent siblings)
  19 siblings, 0 replies; 21+ messages in thread
From: doko at gcc dot gnu dot org @ 2006-08-05  9:43 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #17 from doko at gcc dot gnu dot org  2006-08-05 09:43 -------
Subject: Bug 28359

Author: doko
Date: Sat Aug  5 09:43:02 2006
New Revision: 115946

URL: http://gcc.gnu.org/viewcvs?root=gcc&view=rev&rev=115946
Log:
        PR fastjar/28359 / CVE-2006-3619

        2006-07-17  Richard Guenther  <rguenther@suse.de>
        * jartool.c (extract_jar): Do not allow directory traversal
        to parents of the extraction root.

Modified:
    branches/gcc-4_0-branch/fastjar/ChangeLog
    branches/gcc-4_0-branch/fastjar/jartool.c


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (16 preceding siblings ...)
  2006-08-05  9:43 ` doko at gcc dot gnu dot org
@ 2006-08-11 19:46 ` rguenth at gcc dot gnu dot org
  2010-06-09  9:39 ` jakub at gcc dot gnu dot org
  2010-06-09 11:21 ` marcus at jet dot franken dot de
  19 siblings, 0 replies; 21+ messages in thread
From: rguenth at gcc dot gnu dot org @ 2006-08-11 19:46 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #18 from rguenth at gcc dot gnu dot org  2006-08-11 19:46 -------
I think this is now fixed.


-- 

rguenth at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
      Known to work|                            |4.0.4 4.1.2
         Resolution|                            |FIXED
   Target Milestone|---                         |4.0.4


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (17 preceding siblings ...)
  2006-08-11 19:46 ` rguenth at gcc dot gnu dot org
@ 2010-06-09  9:39 ` jakub at gcc dot gnu dot org
  2010-06-09 11:21 ` marcus at jet dot franken dot de
  19 siblings, 0 replies; 21+ messages in thread
From: jakub at gcc dot gnu dot org @ 2010-06-09  9:39 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #19 from jakub at gcc dot gnu dot org  2010-06-09 09:39 -------
Created an attachment (id=20874)
 --> (http://gcc.gnu.org/bugzilla/attachment.cgi?id=20874&action=view)
CVE-2010-0831.patch

Just for the record, the patch that went in leaves fastjar still vulnerable.
The main issue is that tmp_buff isn't the current directory component, but
current directory component with all previous directory component, so the
.. and . tests will match only for the first component.

https://launchpad.net/bugs/540575
has some patch, but it is very ugly and inefficient.


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
* [Bug fastjar/28359] fastjar directory traversal problem
  2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
                   ` (18 preceding siblings ...)
  2010-06-09  9:39 ` jakub at gcc dot gnu dot org
@ 2010-06-09 11:21 ` marcus at jet dot franken dot de
  19 siblings, 0 replies; 21+ messages in thread
From: marcus at jet dot franken dot de @ 2010-06-09 11:21 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #20 from marcus at jet dot franken dot de  2010-06-09 11:20 -------
Jakubs patch looks good to me.


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359


^ permalink raw reply	[flat|nested] 21+ messages in thread
end of thread, other threads:[~2010-06-09 11:21 UTC | newest]

Thread overview: 21+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2006-07-12 14:50 [Bug fastjar/28359] New: fastjar directory traversal problem marcus at jet dot franken dot de
2006-07-12 14:50 ` [Bug fastjar/28359] " marcus at jet dot franken dot de
2006-07-12 14:55 ` marcus at jet dot franken dot de
2006-07-12 15:08 ` rguenth at gcc dot gnu dot org
2006-07-12 15:14 ` rguenth at gcc dot gnu dot org
2006-07-12 15:19 ` rguenth at gcc dot gnu dot org
2006-07-12 16:57 ` pinskia at gcc dot gnu dot org
2006-07-12 17:48 ` rguenth at gcc dot gnu dot org
2006-07-12 18:30 ` marcus at jet dot franken dot de
2006-07-13  5:04 ` mmitchel at gcc dot gnu dot org
2006-07-13  7:39 ` rguenth at gcc dot gnu dot org
2006-07-13  7:40 ` rguenth at gcc dot gnu dot org
2006-07-17 12:21 ` jakub at redhat dot com
2006-07-17 12:25 ` marcus at jet dot franken dot de
2006-07-17 13:57 ` rguenth at gcc dot gnu dot org
2006-07-17 14:04 ` rguenth at gcc dot gnu dot org
2006-08-05  9:27 ` doko at gcc dot gnu dot org
2006-08-05  9:43 ` doko at gcc dot gnu dot org
2006-08-11 19:46 ` rguenth at gcc dot gnu dot org
2010-06-09  9:39 ` jakub at gcc dot gnu dot org
2010-06-09 11:21 ` marcus at jet dot franken dot de

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).