VVB2060CHANNEL Telegram 914
南宫雪珊
Linux 内核不再删除默认可忽略代码点 https://github.com/torvalds/linux/commit/5c26d2f1d3f5e4be3e196526bead29ecb139cf91 https://r.android.com/3304855 这个安全漏洞导致上游Linux修改行为,因为在具有F属性的文件夹下,路径比较逻辑会被绕过,相当于它有了无数别名。 另外,C+F casefold 依然有效,路径中包含s或ff等的继续受影响,具体列表参考 https://www.unico…
https://github.com/torvalds/linux/commit/231825b2e1ff6ba799c5eaf396d3ab2354e37c6b
长度变化+破坏哈希,让 f2fs 烂掉导致内核回退了。正确的修复是不对文件系统取消删除可忽略代码点,而是对查询字符串取消删除。

https://lore.kernel.org/lkml/CAHk-=wgF7AjODAyO9n+8SfTiQd9-=zTLKh4SQP-xEpeMUPHvAw@mail.gmail.com/
sdcardfs 的忽略大小写已经够烦人了,Google脑子抽风换成大小写折叠,简直就是噩梦
The correct solution is to not do case folding in filesystems, but sadly, people seem to never really understand that. People still see it as a feature, not a bug.



tgoop.com/vvb2060Channel/914
Create:
Last Update:

https://github.com/torvalds/linux/commit/231825b2e1ff6ba799c5eaf396d3ab2354e37c6b
长度变化+破坏哈希,让 f2fs 烂掉导致内核回退了。正确的修复是不对文件系统取消删除可忽略代码点,而是对查询字符串取消删除。

https://lore.kernel.org/lkml/CAHk-=wgF7AjODAyO9n+8SfTiQd9-=zTLKh4SQP-xEpeMUPHvAw@mail.gmail.com/
sdcardfs 的忽略大小写已经够烦人了,Google脑子抽风换成大小写折叠,简直就是噩梦
The correct solution is to not do case folding in filesystems, but sadly, people seem to never really understand that. People still see it as a feature, not a bug.

BY 南宫雪珊




Share with your friend now:
tgoop.com/vvb2060Channel/914

View MORE
Open in Telegram


Telegram News

Date: |

While the character limit is 255, try to fit into 200 characters. This way, users will be able to take in your text fast and efficiently. Reveal the essence of your channel and provide contact information. For example, you can add a bot name, link to your pricing plans, etc. Developing social channels based on exchanging a single message isn’t exactly new, of course. Back in 2014, the “Yo” app was launched with the sole purpose of enabling users to send each other the greeting “Yo.” How to build a private or public channel on Telegram? Telegram has announced a number of measures aiming to tackle the spread of disinformation through its platform in Brazil. These features are part of an agreement between the platform and the country's authorities ahead of the elections in October. With the sharp downturn in the crypto market, yelling has become a coping mechanism for many crypto traders. This screaming therapy became popular after the surge of Goblintown Ethereum NFTs at the end of May or early June. Here, holders made incoherent groaning sounds in late-night Twitter spaces. They also role-played as urine-loving Goblin creatures.
from us


Telegram 南宫雪珊
FROM American