Fix TOCTTOU races in D-Bus SHA-1 auth mechanism (!1477) · Merge requests · GNOME / GLib

Philip Withnall requested to merge wip/pwithnall/1954-dbus-keyring-handling into master May 05, 2020

Fixes #1954 (closed), both by fixing the unit tests (when run in parallel they were racing to access cookies under ~/.dbus-keyrings — the actual homedir of the user running the tests), and by fixing GDBusAuthMechanismSha1 to not have TOCTTOU races when grabbing the lock file for the cookie.

Fixes: #1954 (closed)

Edited May 05, 2020 by Philip Withnall

Fix TOCTTOU races in D-Bus SHA-1 auth mechanism

Merge request reports