Brian Gianforcaro e8857f9b2d CrashReporter: Stop attempting to lockdown the process veil ...

The idea of locking the process veil in CrashReproter is well
intentioned, but ultimately frought with issues.

The fundamental premise is a bit flawed, as we are using the crashing
program as input to dynamically add new paths to the process veil.
This means that an attacker can potentially produce a custom or
malformed binary to trick CrashReporter into allowing an arbitrary
path to be read.

2022-02-03 14:57:01 +01:00

14 KiB

Raw Blame History

View Raw