andreacavalli/netty5
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
4.1_copy
netty5/transport-native-epoll/src/test/java/io/netty/channel/epoll
History
Norman Maurer c735357bf2 Use Files.createTempFile(...) to ensure the file is created with proper permissions 
Motivation:

File.createTempFile(String, String)` will create a temporary file in the system temporary directory if the 'java.io.tmpdir'. The permissions on that file utilize the umask. In a majority of cases, this means that the file that java creates has the permissions: `-rw-r--r--`, thus, any other local user on that system can read the contents of that file.
This can be a security concern if any sensitive data is stored in this file.

This was reported by Jonathan Leitschuh <jonathan.leitschuh@gmail.com> as a security problem.

Modifications:

Use Files.createTempFile(...) which will use safe-defaults when running on java 7 and later. If running on java 6 there isnt much we can do, which is fair enough as java 6 shouldnt be considered "safe" anyway.

Result:

Create temporary files with sane permissions by default.
2021-02-08 11:44:05 +01:00
..
EpollAbstractDomainSocketEchoTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollChannelConfigTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollCompositeBufferGatheringWriteTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDatagramChannelConfigTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDatagramChannelTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDatagramConnectNotExistsTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDatagramMulticastIPv6Test.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDatagramMulticastTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDatagramScatteringReadTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDatagramUnicastIPv6MappedTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDatagramUnicastIPv6Test.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDatagramUnicastTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDetectPeerCloseWithoutReadTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDomainSocketDataReadInitialStateTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDomainSocketEchoTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDomainSocketFdTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDomainSocketFileRegionTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDomainSocketFixedLengthEchoTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDomainSocketGatheringWriteTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDomainSocketObjectEchoTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDomainSocketReuseFdTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDomainSocketShutdownOutputByPeerTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDomainSocketSslClientRenegotiateTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDomainSocketSslEchoTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDomainSocketSslGreetingTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDomainSocketStartTlsTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollDomainSocketStringEchoTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollETSocketAutoReadTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollETSocketConditionalWritabilityTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollETSocketDataReadInitialStateTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollETSocketExceptionHandlingTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollETSocketHalfClosed.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollETSocketReadPendingTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollETSocketStringEchoBusyWaitTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollEventLoopTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollKQueueIovArrayTest.java IovArray should support when there is no unsafe present (#10814) 2020-11-23 14:03:32 +01:00
EpollLTSocketAutoReadTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollLTSocketConditionalWritabilityTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollLTSocketDataReadInitialStateTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollLTSocketExceptionHandlingTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollLTSocketHalfClosed.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollLTSocketReadPendingTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollLTSocketStringEchoBusyWaitTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollReuseAddrTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollServerSocketChannelConfigTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketChannelConfigTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketChannelNotYetConnectedTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketChannelTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketCloseForciblyTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketConnectionAttemptTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketConnectTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketEchoTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketFileRegionTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketFixedLengthEchoTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketGatheringWriteTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketMultipleConnectTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketObjectEchoTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketRstTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketShutdownOutputByPeerTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketShutdownOutputBySelfTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketSslClientRenegotiateTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketSslEchoTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketSslGreetingTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketSslSessionReuseTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketStartTlsTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketStringEchoBusyWaitTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketStringEchoTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketTcpMd5Test.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSocketTestPermutation.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollSpliceTest.java Use Files.createTempFile(...) to ensure the file is created with proper permissions 2021-02-08 11:44:05 +01:00
EpollTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
EpollWriteBeforeRegisteredTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
LinuxSocketTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00
NativeTest.java Enable nohttp check during the build (#10708) 2020-10-23 14:44:18 +02:00