View in Telegram
南宫雪珊
南宫雪珊
Linux 内核不再删除默认可忽略代码点
https://github.com/torvalds/linux/commit/5c26d2f1d3f5e4be3e196526bead29ecb139cf91
https://r.android.com/3304855
这个安全漏洞导致上游Linux修改行为,因为在具有F属性的文件夹下,路径比较逻辑会被绕过,相当于它有了无数别名。
另外,C+F casefold 依然有效,路径中包含s或ff等的继续受影响,具体列表参考
https://www.unicode.org/Public/UCD/latest/ucd/CaseFolding.txt
GitHub
unicode: Don't special case ignorable code points · torvalds/linux@5c26d2f
We don't need to handle them separately. Instead, just let them
decompose/casefold to themselves.
Signed-off-by: Gabriel Krisman Bertazi <krisman@suse.de>
Share
Love Center - Dating, Friends & Matches, NY, LA, Dubai, Global
Find friends or serious relationships easily
Start