Security in the 20-teens
Posted Feb 11, 2010 14:32 UTC (Thu) by
anselm (subscriber, #2796)
In reply to:
Security in the 20-teens by renox
Parent article:
Security in the 20-teens
For a security perspective, the PNG decoder shouldn't have
access to network sockets..
The PNG decoder shouldn't be allowed to open new network sockets.
However, a file descriptor open for reading is a file descriptor open for
reading. It doesn't matter much whether there is a disk or a web server at
the other end.
(
Log in to post comments)