FAQ
Edit report at https://pear.php.net/bugs/bug.php?id=19840&edit=1

ID: 19840
Updated by: alvaro@demogracia.com
Reported By: alvaro@demogracia.com
-Summary: Invalid "Possible symlink attack" warning
+Summary: Invalid "Possible symlink attack" error
Status: Open
Type: Bug
Package: PEAR
Operating System: Windows 7
Package Version: 1.9.4
PHP Version: 5.4.5
Roadmap Versions:
New Comment:

-Summary: Invalid "Possible symlink attack" warning
+Summary: Invalid "Possible symlink attack" error



Previous Comments:
------------------------------------------------------------------------

[2013-03-04 18:45:16] kalvaro

Description:
------------
When the PEAR cache directory is not empty, I always get a series of
errors like this:

C:\>pear upgrade
Error getting channel info from pear.php.net: SECURITY ERROR: Will not
write to C:\Users\ALVARO.GONZALEZ\AppData\Local\Temp\pear\cache\
6d1f6e892384ae452db9a1bd59ee95f5rest.cacheid as it is symlinked to
C:\Users\ALVARO.GONZALEZ\AppData\Local\Temp\pear\cache\6d1f6e892384a
e452db9a1bd59ee95f5rest.cacheid - Possible symlink attack
[...]
Nothing to upgrade

Please note that both paths are identical.

The error comes from function saveCacheFile() at
"PEAR/pear/PEAR/REST.php": lstat($file) and fstat($cachefile_fp) return
different values for "dev" (2 and 0 respectively) and the mismatch makes
the function refuse to write on file cache.

The errors disappear with "pear clear-cache" but return on next
installations.

------------------------------------------------------------------------

Search Discussions

Related Discussions

Discussion Navigation
viewthread | post
Discussion Overview
grouppear-bugs @
categoriesphp
postedMar 4, '13 at 5:47p
activeMar 4, '13 at 5:47p
posts1
users1
websitepear.php.net

1 user in discussion

Alvaro: 1 post

People

Translate

site design / logo © 2022 Grokbase