Control: retitle -1 svn tries to read a directory on a different filesystem and 
hangs
Control: severity -1 grave
Control: tags -1 security

On 2022-10-24 14:21:53 +0200, Vincent Lefevre wrote:
> I have a file called "svn-md5". When I want to open this file with
> emacs (including "emacs -Q"), emacs runs
> 
>   svn --non-interactive status -v svn-md5
> 
> (I don't know why), but "svn --non-interactive status -v svn-md5"
> hangs, so that I can't read the file.

Reproducible with just a "svn info". The reason is that svn tries
to read "/home/.svn", which belongs to another filesystem and
possibly to another user. In addition to the hang, which affects
other applications like emacs, this is potentially a security issue.
svn should stop going up in the hierarchy once the mount point (or
home directory?) has been reached, or at least once the owner of the
directory changes.

FYI, git doesn't have such an issue.

-- 
Vincent Lefèvre <vinc...@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Reply via email to