#7575 NORM 8.2.0 (: Activity install could overwrite if dir name clashes

Zarro Boogs per Child bugtracker at laptop.org
Sun Jul 20 12:51:26 EDT 2008


#7575: Activity install could overwrite if dir name clashes
--------------------+-------------------------------------------------------
 Reporter:  homunq  |         Owner:  marco               
     Type:  defect  |        Status:  new                 
 Priority:  normal  |     Milestone:  8.2.0 (was Update.2)
Component:  sugar   |       Version:  not specified       
 Keywords:          |   Next_action:  never set           
 Verified:  0       |     Blockedby:                      
 Blocking:          |  
--------------------+-------------------------------------------------------
 Currently, bundles simply unzip to the directory named in their zip file.
 All that is checked is the extension on the directory name. This name
 could be the same for different activities. This is insecure and
 unsustainable on many levels.

-- 
Ticket URL: <http://dev.laptop.org/ticket/7575>
One Laptop Per Child <http://laptop.org/>
OLPC bug tracking system


More information about the Bugs mailing list