Date: Fri, 5 Dec 2014 19:41:04 -0800 From: Seth Arnold <seth.arnold@...onical.com> To: oss-security@...ts.openwall.com Subject: Re: Offset2lib: bypassing full ASLR on 64bit Linux On Sat, Dec 06, 2014 at 01:44:31AM +0100, Hanno Böck wrote: > > https://bugzilla.gnome.org/show_bug.cgi?id=741183 > > I tried to dig into this a bit. I'm not really sure, but based on the > output I assume nautilus is relying on file or libmagic to assess the > file type. > > And that's what fails: > $ file --mime-type pie > pie: application/x-sharedlib > > > It seems there is no really easy way to separate executables from > shared libraries and whether this should be considered a bug in > file/libmagic. The only thing I quickly found that would be possible is > searching if a SONAME is present. libmagic uses some "magic" file > format to parse files, I don't know if that's capable of such complex > parsing. A far better mechanism in Nautilus would be to use execve(2) on the pathname and see if it executes. Nautilus will never be good at guessing which files are actually executable on a given system and it is ridiculous for it to try to guess. It should just execute the selected file and if that fails, report the failure to the user. One goofy filemanager doing something silly ought not stop Mozilla from shipping a safer Firefox. Thanks Download attachment "signature.asc" of type "application/pgp-signature" (474 bytes)
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.