Alan Cox c4bbafda70 exec.c: fix coredump to pipe problem and obscure "security hole"
The patch checks for "|" in the pattern not the output and doesn't nail a
pid on to a piped name (as it is a program name not a file)

Also fixes a very very obscure security corner case.  If you happen to have
decided on a core pattern that starts with the program name then the user
can run a program called "|myevilhack" as it stands.  I doubt anyone does
this.

Signed-off-by: Alan Cox <alan@redhat.com>
Confirmed-by: Christopher S. Aker <caker@theshore.net>
Cc: <stable@kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2007-04-17 16:36:26 -07:00
..
2007-02-20 17:10:15 -08:00
2007-04-15 16:48:11 -07:00
2007-03-16 19:25:03 -07:00
2006-01-11 18:42:13 -08:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2006-10-04 06:51:26 -06:00
2007-03-06 09:30:25 -08:00
2006-12-07 08:39:25 -08:00
2006-04-11 13:53:33 +02:00
2007-02-17 16:10:59 -05:00
2006-12-07 08:39:25 -08:00
2007-02-17 21:30:15 -05:00
2006-10-01 00:39:19 -07:00
2005-04-16 15:20:36 -07:00
2006-03-23 07:38:11 -08:00
2007-03-29 14:26:42 +02:00