zenithsiz/ftmemsim-valgrind
1
0
Fork 0
mirror of https://github.com/Zenithsiz/ftmemsim-valgrind.git synced 2026-02-09 05:10:23 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

ignore .valgrindrc files that are world writeable

Browse Source 
or not owned by the current user (CVE-2008-4865)


git-svn-id: svn://svn.valgrind.org/valgrind/trunk@8798
This commit is contained in:
Dirk Mueller
2008-11-22 12:03:19 +00:00
parent 15c571b48a
commit 706dd9fa67
2 changed files with 27 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
docs/xml/manual-core.xml
View File

@@ -1346,7 +1346,15 @@ processed earlier; for example, options in
precedence over those in
<computeroutput>~/.valgrindrc</computeroutput>. The first two
are particularly useful for setting the default tool to
use.</para>
use.
</para>
<para>Please note that the <computeroutput>./.valgrindrc</computeroutput>
file is ignored if it is marked as world writeable or not owned
by the current user. This is because the .valgrindrc can contain options
that are potentially harmful or can be used by a local attacker to
execute code under your user account.
</para>
<para>Any tool-specific options put in
<computeroutput>$VALGRIND_OPTS</computeroutput> or the