Edit report at https://pear.php.net/bugs/bug.php?id=19840&edit=1
ID: 19840
Updated by: [email protected]
Reported By: [email protected]
-Summary: Invalid "Possible symlink attack" warning
+Summary: Invalid "Possible symlink attack" error
Status: Open
Type: Bug
Package: PEAR
Operating System: Windows 7
Package Version: 1.9.4
PHP Version: 5.4.5
Roadmap Versions:
New Comment:
-Summary: Invalid "Possible symlink attack" warning
+Summary: Invalid "Possible symlink attack" error
Previous Comments:
------------------------------------------------------------------------
[2013-03-04 18:45:16] kalvaro
Description:
------------
When the PEAR cache directory is not empty, I always get a series of
errors like this:
C:\>pear upgrade
Error getting channel info from pear.php.net: SECURITY ERROR: Will not
write to C:\Users\ALVARO.GONZALEZ\AppData\Local\Temp\pear\cache\
6d1f6e892384ae452db9a1bd59ee95f5rest.cacheid as it is symlinked to
C:\Users\ALVARO.GONZALEZ\AppData\Local\Temp\pear\cache\6d1f6e892384a
e452db9a1bd59ee95f5rest.cacheid - Possible symlink attack
[...]
Nothing to upgrade
Please note that both paths are identical.
The error comes from function saveCacheFile() at
"PEAR/pear/PEAR/REST.php": lstat($file) and fstat($cachefile_fp) return
different values for "dev" (2 and 0 respectively) and the mismatch makes
the function refuse to write on file cache.
The errors disappear with "pear clear-cache" but return on next
installations.
------------------------------------------------------------------------
