Giters

zakkak / turnin

turnin is a utility that enables students to turnin assignments using the command line. Requires a setup where each class has a unix account in the computer infrastructure of the school/university.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Program Crashes Upon Malicious Action

daknob opened this issue · comments

commented

One can cause turnin to crash by turning in a proper file and upon requesting confirmation of the files remove the file or change its name. There will be further investigation because it is believed this can cause out of bounds read/write.

commented

It does not crash. Tar fails and turnin catches the error. Allthough a more friendly message would indeed be nice.

commented

Triggering this method can cause weird behavior from turnin. More specifically, the following errors have been encountered (conditions unknown):

  • The symlink user9999.tgz does not point to the latest file.
  • The binary turnin turned in an empty tar file. (I have no idea how this happened)
commented

I am not able to reproduce!