4

Is Scandir really secure?

 2 years ago
source link: https://www.codesd.com/item/is-scandir-really-secure.html
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

Is Scandir really secure?

advertisements

In the UNIX® System Threads Reference, under the heading of "Thread-safety" is a list of functions are "not guaranteed to be thread-safe on all UNIX systems." The function scandir() is absent from this list, while readdir() appears on the list.

However the glibc source for scandir() clearly appears to call readdir(), not the thread-safe readdir_r(). So was scandir() omitted from the list for some other reason, or is it thread-safe for some reason I am missing?


I think, this list covers POSIX functions only. scandir(3) is BSD/SVID and might not be listed there hence. The new, thread-safe functions are probably the focus of this list but not listing old, thread-unsafe functions.

Related Articles

HTTPS and encrypted database is really secure in shared hosting?

I read all posts on HTTP over SSL. So far, I know how to get the data securely in a Web form. But I miss the part of recover and keep the data in the same way. I need in my Website a form to collect sensible data from customers (may be also credit ca

PHP Is password_verify really secure? Add another salt?

I've been reading about how it works and it's really cool in how it slows down bruteforce attempts however it still doesn't feel secure. Lets say someone stole my database data including all my user password hashes, and knows that I used password_has

Are secret URLs really secure?

I never leave backdoors in my system, but out of curiosity I was wondering if I left a secret URL like /x52d23r that allowed to bypass some sort of security, and this was only for my personal use---would that be somehow discovered by a third party wi

Is the hash mechanism really secure?

Well, I have always seen (and following) people saying to use hashing mechanism for storing passwords in database. I am really concerned is it secure? Lets go with example. Let's say I am hacker and I got your database name, id and password. Now I ha

Brian Goetz: SafePoint example - is it really secure?

In Java Concurrency in Practice by Brian Goetz there is the following example (listing 4.11 shortened). public class SafePoint { private int x, y; public SafePoint(int x, int y) { this.x = x; this.y = y; } public synchronized int[] get() { return new

Is LibCurl really secure?

After being unable to find out what was happening in my app in the previous question, I have tried to reproduce it in my pc using valgrind to find memory / multithread problems. I have seen in many places this: ==769== Possible data race during write

Why java concurrent collections are really secure

I was looking at the code of java concurrent collections and I see that they just wrap simple collections with locking some lock in the beginning of the operation and unlocking it in the end. What about volatile? If the back end collection is not vol

Creating a SECURE high score service using ASP.NET MVC 3

I've done a lot of research on this questions but still can't seem to find what I'm looking for. Basically I've created a game for WP7 and I want it to connect to my service I created to send high scores and receive the leaderboards. Right now the se

IOS encryption to use web data securely

I'm developing an app that's pretty simple, and the important part of it is the content, which consists of lots of info that has been gathered over many years. I want to format it in a nice way to show to the user. When the user downloads the app and

Secure hashing of a few million items

I have a database with companies and their clients. The database needs to be able to answer the question 'which companies have a client living at address X?', which is normally very straightforward to implement of course. What I want to avoid is that

Is it a secure SSL data transmission? Or not?

I want to get an information from one website into a php script on another website via https. I read at www.php.net on the page of the fopen() function that this function supports HTTPS protocol. But is it really secure SSL transmission? Is GET varia

Verifying the security of the connection to the Php database

Well, I'm creating Database connection with following php code: <?php define('DB_HOST', 'localhost'); define('DB_USER', 'root'); define('DB_PASSWORD', ''); define('DB_DATABASE', 'evantechbd'); $db = mysql_connect(DB_HOST, DB_USER); if (!$db) { die('C

Security Vulnerability Checklist

I am working on a consumer facing web application built on .Net/C# MSSQL as the databse We have been following general good coding practices to prevent bugs and SQL/JS query injections but non of us are experts on security. What would be a good check

Development of cross-platform games: ease of development vs security

I'm a member and contributor of the Argentum Online (AO) community, the first MMORPG from Argentina, which is Free Software; which, although it's not 3D, it's really addictive and has some dozens of thousands of users. Really unluckily AO was develop

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK