* Matthew Toseland <toad at amphibian.dyndns.org> [2008-07-20 00:02:17]:

> On Sunday 08 June 2008 13:00, nextgens at freenetproject.org wrote:
> > Author: nextgens
> > Date: 2008-06-08 12:00:22 +0000 (Sun, 08 Jun 2008)
> > New Revision: 20264
> > 
> > Modified:
> >    trunk/contrib/fec/common/src/com/onionnetworks/util/NativeDeployer.java
> > Log:
> > contrib: fix the following tickets:
> > #892: Onion libraries are using a static path C:\.onionnetworks\lib\win32\ 
> > #1092: Failure if no home directory because onion extracts to home dir
> > 
> > the fix will be deployed along with next freenet-ext.jar
> 
> Any chance of symlink races on *nix?

We are reading the library from a known, fixed location... which is
writable by everyone for efficiency purpose. It's insecure by design.

I didn't change it because that's how the library was doing it; Arguably
I should have.

NextGen$
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: 
<https://emu.freenetproject.org/pipermail/devl/attachments/20080720/bdbca317/attachment.pgp>

Reply via email to