No subject

Mon Jan 28 08:41:14 PST 2013

The call to shm_open lacks O_EXCL, meaning on a multiuser machine another user can create the shm object first. Iterating in a loop of random numbers is not sufficient to prevent this. They could in theory even create all possible names. And then webkit will be sharing memory with someone who is not the user running webkit.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.