FAQ
Edit report at https://pear.php.net/bugs/bug.php?id=19840&edit=1

  ID: 19840
  Updated by: borz_off@cs.msu.su
  Reported By: alvaro@demogracia.com
  Summary: Invalid "Possible symlink attack" error
-Status: Open
+Status: Duplicate
  Type: Bug
  Package: PEAR
  Operating System: Windows 7
  Package Version: 1.9.4
  PHP Version: 5.4.5
  Roadmap Versions:
  New Comment:

-Status: Open
+Status: Duplicate
Duplicate of bug #18834


Previous Comments:
------------------------------------------------------------------------

[2013-03-04 18:47:30] kalvaro

-Summary: Invalid "Possible symlink attack" warning
+Summary: Invalid "Possible symlink attack" error


------------------------------------------------------------------------

[2013-03-04 18:45:16] kalvaro

Description:
------------
When the PEAR cache directory is not empty, I always get a series of
errors like this:

C:\>pear upgrade
Error getting channel info from pear.php.net: SECURITY ERROR: Will not
write to C:\Users\ALVARO.GONZALEZ\AppData\Local\Temp\pear\cache\
6d1f6e892384ae452db9a1bd59ee95f5rest.cacheid as it is symlinked to
C:\Users\ALVARO.GONZALEZ\AppData\Local\Temp\pear\cache\6d1f6e892384a
e452db9a1bd59ee95f5rest.cacheid - Possible symlink attack
[...]
Nothing to upgrade

Please note that both paths are identical.

The error comes from function saveCacheFile() at
"PEAR/pear/PEAR/REST.php": lstat($file) and fstat($cachefile_fp) return
different values for "dev" (2 and 0 respectively) and the mismatch makes
the function refuse to write on file cache.

The errors disappear with "pear clear-cache" but return on next
installations.

------------------------------------------------------------------------

Search Discussions

Related Discussions

Discussion Navigation
viewthread | post
Discussion Overview
grouppear-bugs @
categoriesphp
postedFeb 26, '14 at 9:20p
activeFeb 26, '14 at 9:20p
posts1
users1
websitepear.php.net

1 user in discussion

Borz_off: 1 post

People

Translate

site design / logo © 2022 Grokbase