v/os at 413ffbfc3b90c198bf0f6874a9ea78ba1a374ca7 - v

mirror/v

mirror of https://github.com/vlang/v.git synced 2023-08-10 21:13:21 +03:00

History

Delyan Angelov 4c9c515f8b parser: remove hardcoded check for function calls for `C.stat`, `C.sigaction`, etc (#18535 )		2023-06-24 08:03:12 +03:00
..
bare
cmdline
filelock
font
notify
args.v
const_nix.c.v
const_windows.c.v
const.v
debugger_darwin.c.v
debugger_default.c.v
debugger_freebsd.c.v
debugger_linux.c.v
debugger_windows.c.v
dir_expansions_test.v
environment_test.v
environment.c.v
environment.js.v
fd.c.v
file_test.v	os: fix truncate() on windows (#18262 )	2023-05-25 14:37:53 +03:00
file.c.v	os: fix truncate() on windows (#18262 )	2023-05-25 14:37:53 +03:00
file.js.v
filepath_test.v
filepath_windows.v
filepath.v
find_abs_path_of_executable_test.v
glob_test.v
inode_test.v
inode.c.v
open_uri_default.c.v
open_uri_windows.c.v
os_android_outside_termux.c.v
os_darwin.c.v
os_js.js.v
os_linux.c.v
os_nix.c.v
os_structs_dirent_default.c.v
os_structs_sigaction_default.c.v
os_structs_stat_default.c.v
os_structs_stat_linux.c.v
os_structs_utsname_default.c.v
os_test.v
os_windows.c.v	parser: remove hardcoded check for function calls for `C.stat`, `C.sigaction`, etc (#18535 )	2023-06-24 08:03:12 +03:00
os.c.v	parser: remove hardcoded check for function calls for `C.stat`, `C.sigaction`, etc (#18535 )	2023-06-24 08:03:12 +03:00
os.js.v
os.v
password_nix.c.v
password_windows.c.v
process_nix.c.v
process_test.v
process_windows.c.v
process.c.v
process.js.v
process.v
README.md
signal_test.v
signal.c.v
signal.js.v
signal.v

README.md

Description:

os provides common OS/platform independent functions for accessing command line arguments, reading/writing files, listing folders, handling processes etc.

A few os module functions can lead to the TOCTOU vulnerability if used incorrectly. TOCTOU (Time-of-Check-to-Time-of-Use problem) can occur when a file, folder or similar is checked for certain specifications (e.g. read, write permissions) and a change is made afterwards. In the time between the initial check and the edit, an attacker can then cause damage. The following example shows an attack strategy on the left and an improved variant on the right so that TOCTOU is no longer possible.

Example Hint: os.create() opens a file in write-only mode

Possibility for TOCTOU attack

if os.is_writable("file"){

    // >> time to make a quick attack (e.g. symlink /etc/passwd to >file<) <<

    mut f := os.create('path/to/file') ?
        // <do something with file>
    f.close()
}

TOCTOU not possible

mut f := os.create('path/to/file') or {
    println("file not writable")
}

// >> do something with file; file is locked <<

f.close()

Proven affected functions
The following functions should be used with care and only when used correctly.

os.is_readable()
os.is_writable()
os.is_executable()
os.is_link()

README.md

Description:

Security advice related to TOCTOU attacks