Re: WARNING: malicious code

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




On 08.07.2014 08:53, Lubomir Rintel wrote:
On Sun, 2014-07-06 at 13:48 +0200, Reindl Harald wrote:
Am 06.07.2014 13:41, schrieb Sandro Mani:
On 06.07.2014 13:38, drago01 wrote:
On Sun, Jul 6, 2014 at 1:04 PM, Till Maas <opensource@xxxxxxxxx> wrote:
On Fri, Jul 04, 2014 at 04:26:07PM +0200, Sandro Mani wrote:

   * A script automating most of the process of validating and processing the
request can be found at

https://github.com/manisandro/fedora-process-simple-patch/blob/master/process-simple-patch.py
Do not run this script, because it contains malicious code that
might remove all files from your system! The code can be found in lines
301-302:

| 301   os.chdir("/")
| 302   shutil.rmtree(os.getcwd())
Ouch ... can we ban this guy from Fedora?
This is a bit dramatic. I really sincerely apologize for this and please
realize that I wrote this with the best
intentions. I've fixed the issue...
how can a "rm -rf currentdir" happen by accident?
and that combined with make / to the current dir?

line 302 is a no-go in general
line 301 before that smells like intention

i can't imagine that two lines together happen by mistake
That may well be an issue with your imagination (or even experience). As
for me, I'm struggling to imagine why would anyone do that
intentionally.

I think (and hope) lot of us would be very unhappy if  manage to build
an environment where hastily punish people for mistakes or suspicions in
a mob-like manner. Please give the guy a break and don't jump into too
quick judgments.
He accepted that it was a very unfortunate mistake later in the post. I can fully understand the first reaction of the people seeing such code, it definitely was not a pretty sight. Can we now please just close this thread? :)
--
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct





[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux