[tor-bugs] #23800 [Applications/Tor Messenger]: Loading shared object files from world writable directories

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Oct 9 22:14:18 UTC 2017


#23800: Loading shared object files from world writable directories
----------------------------------------+------------------------
 Reporter:  arlolra                     |          Owner:  (none)
     Type:  defect                      |         Status:  new
 Priority:  Medium                      |      Milestone:
Component:  Applications/Tor Messenger  |        Version:
 Severity:  Normal                      |     Resolution:
 Keywords:                              |  Actual Points:
Parent ID:                              |         Points:
 Reviewer:                              |        Sponsor:
----------------------------------------+------------------------

Comment (by boklm):

 {{{
 $ readelf -d instantbird | grep runpath
  0x000000000000001d (RUNPATH)            Library runpath:
 [/var/tmp/dist/selfrando/out/x86_64/bin]
 $ readelf -d ./TorBrowser/Data/Browser/profile.default/extensions/ctypes-
 otr at tormessenger/chrome/content/libgcrypt.so.20.0.6 | grep RPATH
  0x000000000000000f (RPATH)              Library rpath: [/var/tmp/dist
 /libgpg-error/lib]
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23800#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list