[Mono-bugs] [Bug 641915] Security hole: Mono should not search current directory for DLLs

bugzilla_noreply at novell.com bugzilla_noreply at novell.com
Mon Sep 27 08:11:32 EDT 2010


https://bugzilla.novell.com/show_bug.cgi?id=641915

https://bugzilla.novell.com/show_bug.cgi?id=641915#c3


--- Comment #3 from Richard Brooksby <rb at ravenbrook.com> 2010-09-27 12:11:31 UTC ---
Hi Miguel.  You missed the point.

d1/ex.c:

// ex.c 
void stuff () { printf ("hola\n"); }

d2/ex.c:

// ex.c 
void stuff () { printf ("you've been hacked\n"); }

$ cd d1
$ mono a.exe
hola
$ cd ../d2
$ mono ../d1/a.exe
you've been hacked

-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.


More information about the mono-bugs mailing list