mirror of
https://gitlab.freedesktop.org/dbus/dbus.git
synced 2025-12-28 02:40:09 +01:00
bbf11cd5f9
This is one of four commits needed to address CVE-2014-3637. When a file descriptor is passed to dbus-daemon, the associated D-Bus message might not be fully sent to dbus-daemon yet. Dbus-daemon keeps the file descriptor in the DBusMessageLoader of the connection, waiting for the rest of the message. If the client stops sending the remaining bytes, dbus-daemon will wait forever and keep that file descriptor. This patch adds pending_fd_timeout (milliseconds) in the configuration to disconnect a connection after a timeout when a file descriptor was sent but not the remaining message. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=80559 Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk> |
||
|---|---|---|
| .. | ||
| .gitignore | ||
| busconfig.dtd | ||
| dbus-cleanup-sockets.1.xml.in | ||
| dbus-daemon.1.xml.in | ||
| dbus-faq.xml | ||
| dbus-launch.1.xml.in | ||
| dbus-monitor.1.xml.in | ||
| dbus-run-session.1.xml.in | ||
| dbus-send.1.xml.in | ||
| dbus-specification.xml | ||
| dbus-test-plan.xml | ||
| dbus-tutorial.xml | ||
| dbus-uuidgen.1.xml.in | ||
| dcop-howto.txt | ||
| diagram.png | ||
| diagram.svg | ||
| doxygen_to_devhelp.xsl | ||
| file-boilerplate.c | ||
| introspect.dtd | ||
| introspect.xsl | ||
| Makefile.am | ||
| system-activation.txt | ||
| TODO | ||
