severity 348420 minor
thanks
* Piotr Engelking ([EMAIL PROTECTED]) wrote:
> Package: firefox
> Version: 1.0.7-1
> Severity: normal
>
> When Firefox executes external programs, it passes to them all file
> descriptors it has open. This is undesirable, especially in the case of
> /dev/dsp, since two programs cannot use it at the same time. This bug is
> present in version 1.5, as well.
>
>
> Steps to reproduce:
>
> * Install flash plugin from Macromedia.
>
> * Open some flash file that plays sound. Firefox should now have /dev/dsp
> open:
>
> $ lsof /dev/dsp
> COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
> firefox-b 25038 hippy 43u CHR 14,3 2144 /dev/dsp0
>
> * Without closing the flash, ask Firefox to open some file in an external
> program. We can, for an example, open a pdf file in xpdf. Firefox will
> pass its file descriptors to xpdf:
>
> $ lsof /dev/dsp
> COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
> xpdf.bin 17363 hippy 28u CHR 14,3 2144 /dev/dsp0
> firefox-b 25038 hippy 28u CHR 14,3 2144 /dev/dsp0
>
>
> Expected behaviour:
>
> Firefox shouldn't pass any file descriptors other than
> std{in,out,err} to external programs.Yes, this would be cleaner, but what exactly is the problem? just passing the open file descriptor doesn't mean the execed process has access to it, unless it went through it's descriptor list looking for it. -- Eric Dorland <[EMAIL PROTECTED]> ICQ: #61138586, Jabber: [EMAIL PROTECTED] 1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6 -----BEGIN GEEK CODE BLOCK----- Version: 3.12 GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+ O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+ G e h! r- y+ ------END GEEK CODE BLOCK------
signature.asc
Description: Digital signature
