Opened 9 years ago

Last modified 3 years ago

#13579 closed defect

test_executable security risk — at Version 1

Reported by: vbraun Owned by: mvngu
Priority: blocker Milestone: sage-5.4
Component: doctest coverage Keywords:
Cc: jdemeyer Merged in:
Authors: Reviewers:
Report Upstream: Reported upstream. No feedback yet. Work issues:
Branch: Commit:
Dependencies: Stopgaps:

Status badges

Description (last modified by jdemeyer)

test_executable runs various executables in /tmp. When running a script, Python puts the directory containing that script in sys.path. Therefore, it is trivial for any user to have code executed by the user running the doctests. For example:

[eviluser@hostname ~]$ echo 'print "EVIL!!"' > /tmp/
[vbraun@hostname ~]$ sage -t -force_lib devel/sage/sage/tests/
sage -t -force_lib "devel/sage/sage/tests/"       
File "/home/vbraun/opt/sage-5.4.beta1/devel/sage/sage/tests/", line 248:
    sage: print out

test_executable should securely create a temp directory and run the executable in there.

Change History (1)

comment:1 Changed 9 years ago by jdemeyer

  • Description modified (diff)
Note: See TracTickets for help on using tickets.