- 25 5月, 2022 1 次提交
-
-
由 julio 提交于
-
- 03 5月, 2022 1 次提交
-
-
由 Martin Geisler 提交于
The security example shows that `env::current_exe` will return the path used when the program was started. This is not really surprising considering how hard links work: after `ln foo bar`, the two files are _equivalent_. It is _not_ the case that `bar` is a “link” to `foo`, nor is `foo` a link to `bar`. They are simply two names for the same underlying data. The security vulnerability linked to seems to be different: there an attacker would start a SUID binary from a directory under the control of the attacker. The binary would respawn itself by executing the program found at `/proc/self/exe` (which the attacker can control). This is a real problem. In my opinion, the example given here doesn’t really show the same problem, it just shows a misunderstanding of what hard links are. I looked through the history a bit and found that the example was introduced in #33526. That PR actually has two commits, and the first (8478d48d) explains the race condition at the root of the linked security vulnerability. The second commit proceeds to replace the explanation with the example we have today. This commit reverts most of the second commit from #33526.
-
- 14 4月, 2022 1 次提交
-
-
由 Jacob Pratt 提交于
-
- 28 3月, 2022 1 次提交
-
-
由 David Tolnay 提交于
-
- 10 3月, 2022 1 次提交
-
-
由 T-O-R-U-S 提交于
This updates the standard library's documentation to use the new syntax. The documentation is worthwhile to update as it should be more idiomatic (particularly for features like this, which are nice for users to get acquainted with). The general codebase is likely more hassle than benefit to update: it'll hurt git blame, and generally updates can be done by folks updating the code if (and when) that makes things more readable with the new format. A few places in the compiler and library code are updated (mostly just due to already having been done when this commit was first authored).
-
- 11 2月, 2022 1 次提交
-
-
由 Guillaume Gomez 提交于
-
- 31 10月, 2021 1 次提交
-
-
由 John Kugelman 提交于
-
- 19 10月, 2021 1 次提交
-
-
由 Eugene Talagrand 提交于
As a security measure, Windows 11 introduces a new temporary directory API, GetTempPath2. When the calling process is running as SYSTEM, a separate temporary directory will be returned inaccessible to non-SYSTEM processes. For non-SYSTEM processes the behavior will be the same as before.
-
- 17 9月, 2021 1 次提交
-
-
- 27 8月, 2021 1 次提交
-
-
由 Chris Denton 提交于
It might not be obvious that the "path of the current running executable" may (or may not) mean "at the time it was loaded".
-
- 17 8月, 2021 1 次提交
-
-
由 inquisitivecrystal 提交于
-
- 29 7月, 2021 1 次提交
-
-
由 Ali Malik 提交于
-
- 24 7月, 2021 1 次提交
-
-
由 Érico Nogueira Rolim 提交于
The function parameters were renamed, but the documentation wasn't.
-
- 06 7月, 2021 3 次提交
-
-
由 Aris Merchant 提交于
-
由 Aris Merchant 提交于
-
由 Aris Merchant 提交于
Before this, `std`'s env var getter functions would panic on receiving certain invalid inputs. This commit makes them return a `None` or `Err` instead.
-
- 24 6月, 2021 1 次提交
-
-
由 Smitty 提交于
-
- 10 5月, 2021 1 次提交
-
-
由 shirshak55 提交于
-
- 30 4月, 2021 1 次提交
-
-
由 Josh Triplett 提交于
Searching for `chdir` in the Rust documentation produces no useful results.
-
- 29 4月, 2021 1 次提交
-
-
由 r00ster91 提交于
-
- 28 4月, 2021 1 次提交
-
-
由 r00ster 提交于
-
- 25 4月, 2021 2 次提交
- 22 4月, 2021 1 次提交
-
-
由 Christiaan Dirkx 提交于
-
- 21 4月, 2021 1 次提交
-
-
由 Christiaan Dirkx 提交于
-
- 21 1月, 2021 1 次提交
-
-
由 Josh Triplett 提交于
Update the sample code to not create an insecure temporary file.
-
- 05 9月, 2020 1 次提交
-
-
由 Camelid 提交于
-
- 31 8月, 2020 1 次提交
-
-
由 Lzu Tao 提交于
Also doing fmt inplace as requested.
-
- 30 8月, 2020 2 次提交
-
-
由 Ivan Tham 提交于
-
由 Ivan Tham 提交于
vars() rather than vars function Co-authored-by: NJoshua Nelson <joshua@yottadb.com> Use [xxx()] rather than the [xxx] function Co-authored-by: NJoshua Nelson <joshua@yottadb.com> Env text representation of function intra-doc link Suggested by @jyn514 Link join_paths in env doc for parity Change xxx to env::xxx for lib env doc Add link requsted by @jyn514 Fix doc build with same link Co-authored-by: NJoshua Nelson <joshua@yottadb.com> Fix missing intra-doc link Fix added whitespace in doc Co-authored-by: NJoshua Nelson <joshua@yottadb.com> Add brackets for `join_paths` Co-authored-by: NJoshua Nelson <joshua@yottadb.com> Use unused link join_paths Removed same link for join_paths Co-authored-by: NJoshua Nelson <joshua@yottadb.com> Remove unsed link join_paths
-
- 17 8月, 2020 2 次提交
- 28 7月, 2020 1 次提交
-
-
由 mark 提交于
-
- 15 7月, 2020 1 次提交
-
-
由 Eric Huss 提交于
This simplifies the definition for ARCH. Note that this changes asmjs-unknown-emscripten ARCH to `wasm32`, which reflects the actual target arch.
-
- 09 6月, 2020 2 次提交
-
-
由 Dylan McKay 提交于
It is not possible to compile libstd for AVR anyway.
-
由 Jake Goulding 提交于
-
- 02 5月, 2020 1 次提交
-
-
由 Jacob Kiesel 提交于
-
- 19 3月, 2020 1 次提交
-
-
由 lzutao 提交于
-
- 01 1月, 2020 1 次提交
-
-
由 msizanoen1 提交于
-
- 28 12月, 2019 1 次提交
-
-
由 Matthew Kraai 提交于
-