Modify

Opened 10 years ago

#11466 new defect

Leaking stderr of the child processes

Reported by: Jun Omae Owned by: Philippe Lang
Priority: normal Component: CryptDataPlugin
Severity: normal Keywords:
Cc: Trac Release:

Description

If public_key_path and private_key_path aren't configured, stderr of openssl and more processes are leaked.

  • Should not create child process without key pair.
  • Should not leak the stderr of child processes.
192.168.11.33 - - [02/Jan/2014 04:40:12] "GET /wiki/SandBox/CryptDataPlugin HTTP/1.1" 200 -
usage: more [-dflpcsu] [+linenum | +/pattern] name1 name2 ...
192.168.11.33 - - [02/Jan/2014 04:40:19] "GET /wiki/SandBox/CryptDataPlugin?action=edit HTTP/1.1" 200 -
192.168.11.33 - - [02/Jan/2014 04:40:19] "GET /chrome/common/js/wikitoolbar.js HTTP/1.1" 200 -
192.168.11.33 - - [02/Jan/2014 04:40:19] "GET /chrome/common/js/resizer.js HTTP/1.1" 200 -
192.168.11.33 - - [02/Jan/2014 04:40:19] "GET /chrome/common/js/auto_preview.js HTTP/1.1" 200 -
192.168.11.33 - - [02/Jan/2014 04:40:20] "GET /chrome/common/edit_toolbar.png HTTP/1.1" 200 -
192.168.11.33 - - [02/Jan/2014 04:40:20] "GET /chrome/common/grip.png HTTP/1.1" 200 -
Usage: rsautl [options]
-in file        input file
-out file       output file
-inkey file     input key
-keyform arg    private key format - default PEM
-pubin          input is an RSA public
-certin         input is a certificate carrying an RSA public key
-ssl            use SSL v2 padding
-raw            use no padding
-pkcs           use PKCS#1 v1.5 padding (default)
-oaep           use PKCS#1 OAEP
-sign           sign with private key
-verify         verify with public key
-encrypt        encrypt with public key
-decrypt        decrypt with private key
-hexdump        hex dump output
-engine e       use engine e, possibly a hardware device.
-passin arg    pass phrase source
192.168.11.33 - - [02/Jan/2014 04:40:44] "POST /wiki/SandBox/CryptDataPlugin HTTP/1.1" 303 -
usage: more [-dflpcsu] [+linenum | +/pattern] name1 name2 ...
192.168.11.33 - - [02/Jan/2014 04:40:44] "GET /wiki/SandBox/CryptDataPlugin HTTP/1.1" 200 -

Attachments (0)

Change History (0)

Modify Ticket

Change Properties
Set your email in Preferences
Action
as new The owner will remain Philippe Lang.

Add Comment


E-mail address and name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.