Re: Untrusted fs and invalid filenames

[Eitan Adler <lists () eitanadler com>]

On Sat, Mar 12, 2011 at 12:03 PM, Vasiliy Kulikov <segoon () openwall com> wrote:
> This is a resumption of the subject "Physical access vulnerabilities and
> auto-mounting" brought by Dan Rosenberg.  The previous discussion was
> about possible attacks the kernel, now I'd like to talk about attacks
> userland programs.

http://www.dwheeler.com/essays/fixing-unix-linux-filenames.html and
http://www.dwheeler.com/essays/filenames-in-shell.html are relevant
here.




-- 
Eitan Adler