[tbb-bugs] #32616 [Applications/Tor Browser]: disable GetSecureOutputDirectoryPath() functionality

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Nov 26 19:19:16 UTC 2019


#32616: disable GetSecureOutputDirectoryPath() functionality
-------------------------------------+-------------------------------------
     Reporter:  mcs                  |      Owner:  tbb-team
         Type:  defect               |     Status:  new
     Priority:  Medium               |  Milestone:
    Component:  Applications/Tor     |    Version:
  Browser                            |   Keywords:  tbb-
     Severity:  Normal               |  update,TorBrowserTeam201911
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+-------------------------------------
 Even though the code paths that end in `GetSecureOutputDirectoryPath()`
 should not be taken in Tor Browser, want to avoid any chance that the
 updater will create files under `C:\Program Files (x86)` or a similar
 location. Therefore we will stub out the body of
 `GetSecureOutputDirectoryPath()` and have it return an error.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/32616>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list