bugzilla.mozilla.org has resumed normal operation. Attachments prior to 2014 will be unavailable for a few days. This is tracked in Bug 1475801.
Please report any other irregularities here.

Simplify symlink reversal by pretending they don't exist

RESOLVED WONTFIX

Status

()

Core
Security: Process Sandboxing
P3
minor
RESOLVED WONTFIX
a year ago
19 days ago

People

(Reporter: gcp, Unassigned)

Tracking

Trunk
All
Linux
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: sb+)

(Reporter)

Description

a year ago
Jed Davis suggested in bug 1308400:

"It occurs to me that we don't need to let the client normalize the path in the first place — we can return `EINVAL` (not a symlink) instead.  The question then is whether there are any cases where we still need to do an actual `readlink`, given that we can `realpath` on the server side if we need to."

There's a few tricks here, and bug 1290896 might come back to us, but it's worth a shot.
(Reporter)

Updated

a year ago
Depends on: 1308400
(Reporter)

Comment 2

a year ago
As soon as stat() lies about the existence of symlinks, some tests like dom/xhr/tests/browser_blobFromFile.js start failing. It's not very clear to me why that is the case because there's no clear error - the test just times out.

Updated

a year ago
Whiteboard: sb+

Updated

10 months ago
Priority: -- → P3
(Reporter)

Updated

19 days ago
Status: NEW → RESOLVED
Last Resolved: 19 days ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.