Opened 6 years ago

Closed 6 years ago

#10641 closed defect (fixed)

flashproxy writes temporary certificate files outside of TOR_PT_STATE_LOCATION

Reported by: dcf Owned by: infinity0
Priority: Low Milestone:
Component: Archived/Flashproxy Version:
Severity: Keywords:
Cc: infinity0 Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

flashproxy/keys.py uses tempfile.NamedTemporaryFile without the dir argument, meaning that files will be saved to some system-wide temporary directory. Even though the files are immediately deleted, we should not write anything outside of TOR_PT_STATE_LOCATION.

Behavior changed in 1e541947c32f8d390b5df1cc1c42928e7c058dd5. Before that, the get_state_dir function was used to find out where to save the temporary file.

Child Tickets

Change History (2)

comment:1 Changed 6 years ago by infinity0

Owner: changed from dcf to infinity0
Status: newassigned

comment:2 Changed 6 years ago by dcf

Resolution: fixed
Status: assignedclosed

Fixed in c56dfcf8.

Note: See TracTickets for help on using tickets.