public inbox for gcc-prs@sourceware.org
help / color / mirror / Atom feed
* Re: ada/6717: Race condition in GNAT.Sockets.Create_Selector
@ 2003-05-10 23:56 Dara Hazeghi
  0 siblings, 0 replies; 3+ messages in thread
From: Dara Hazeghi @ 2003-05-10 23:56 UTC (permalink / raw)
  To: nobody; +Cc: gcc-prs

The following reply was made to PR ada/6717; it has been noted by GNATS.

From: Dara Hazeghi <dhazeghi@yahoo.com>
To: gcc-gnats@gcc.gnu.org, fw@deneb.enyo.de
Cc:  
Subject: Re: ada/6717: Race condition in GNAT.Sockets.Create_Selector
Date: Sat, 10 May 2003 16:48:28 -0700

 http://gcc.gnu.org/cgi-bin/gnatsweb.pl?cmd=view%20audit- 
 trail&database=gcc&pr=6717
 
 Hello,
 
 gcc 3.1 is by now rather old. Is it possible for you to determine  
 whether this problem still exists on gcc 3.3 branch or current  
 mainline? Thanks,
 
 Dara
 


^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: ada/6717: Race condition in GNAT.Sockets.Create_Selector
@ 2003-05-12  0:16 Dara Hazeghi
  0 siblings, 0 replies; 3+ messages in thread
From: Dara Hazeghi @ 2003-05-12  0:16 UTC (permalink / raw)
  To: nobody; +Cc: gcc-prs

The following reply was made to PR ada/6717; it has been noted by GNATS.

From: Dara Hazeghi <dhazeghi@yahoo.com>
To: Florian Weimer <fw@deneb.enyo.de>
Cc: gcc-gnats@gcc.gnu.org
Subject: Re: ada/6717: Race condition in GNAT.Sockets.Create_Selector
Date: Sun, 11 May 2003 17:15:11 -0700 (PDT)

 --- Florian Weimer <fw@deneb.enyo.de> wrote:
 > Dara Hazeghi <dhazeghi@yahoo.com> writes:
 > 
 > > gcc 3.1 is by now rather old. Is it possible for
 > you to determine
 > > whether this problem still exists on gcc 3.3
 > branch or current
 > > mainline? Thanks,
 > 
 > AFAIK, no Ada code in this area has been changed.
 
 Thanks for the update. Sorry that there hasn't been
 any progress...
 
 Dara
 
 __________________________________
 Do you Yahoo!?
 The New Yahoo! Search - Faster. Easier. Bingo.
 http://search.yahoo.com


^ permalink raw reply	[flat|nested] 3+ messages in thread

* ada/6717: Race condition in GNAT.Sockets.Create_Selector
@ 2002-05-18  5:26 fw
  0 siblings, 0 replies; 3+ messages in thread
From: fw @ 2002-05-18  5:26 UTC (permalink / raw)
  To: gcc-gnats


>Number:         6717
>Category:       ada
>Synopsis:       Race condition in GNAT.Sockets.Create_Selector
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    unassigned
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat May 18 05:26:02 PDT 2002
>Closed-Date:
>Last-Modified:
>Originator:     fw@deneb.enyo.de
>Release:        GCC 3.1, mainline
>Organization:
>Environment:
Any platform that supports GNAT.Sockets.
>Description:
Create_Selector creates a signalling socket in an unsafe way. A malicious local user (or, if the host implements a sufficiently weak end system model, someone on the local network) can connect to the newly created socket before the application itself, thereby disrupting normal operation.
>How-To-Repeat:

>Fix:
Switch back to using pipes instead sockets for signalling, as in GNAT 3.14p.

On platforms which do not have pipes, use UDP for signalling, and add some kind of check that the triggering 
UDP packet really originated from the program itself.
>Release-Note:
>Audit-Trail:
>Unformatted:


^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2003-05-12  0:16 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2003-05-10 23:56 ada/6717: Race condition in GNAT.Sockets.Create_Selector Dara Hazeghi
  -- strict thread matches above, loose matches on Subject: below --
2003-05-12  0:16 Dara Hazeghi
2002-05-18  5:26 fw

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).