Closed Bug 976295 Opened 10 years ago Closed 10 years ago

Delete temp key store files from signer

Categories

(Marketplace Graveyard :: Integration, defect)

Product:
Marketplace Graveyard
Component:
Integration
Platform:
x86
macOS
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED
Milestone:
2014-03-04

People

(Reporter: kumar, Assigned: kumar)

References

Details

(Whiteboard: [qa-]) 

Newly generated key store files on the APK Signer are stored in a temp dir before getting uploaded to S3. Due to order of operations, the temp key stores are not deleted after upload. Let's delete them on disk to protect against any unforseen exploits.
Blocks: 958329
Assignee: nobody → kumar.mcmillan
Fixed https://github.com/mozilla/apk-signer/commit/23a2a6a582e8508a249d00ad2e6568e27326ff20
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED
Target Milestone: --- → 2014-03-04
Please add STR here or mark it with [qa-] if no QA is needed.
Flags: needinfo?(kumar.mcmillan)
Flags: needinfo?(kumar.mcmillan)
Whiteboard: [qa-]
You need to log in before you can comment on or make changes to this bug.