The long road to a fix for CVE-2021-20316
The long road to a fix for CVE-2021-20316
Posted Feb 12, 2022 2:52 UTC (Sat) by bartoc (guest, #124262)In reply to: The long road to a fix for CVE-2021-20316 by jra
Parent article: The long road to a fix for CVE-2021-20316
embracing the AT calls is still a good idea imo, there have been windows apps with toctou bugs that would have been fixed with a proper openat equivalent, and windows requires administrator ACLs to create symlinks (for exactly this reason)