Re: [Development] The shmget security fix

2013-02-23 Thread Richard Moore
On 21 February 2013 01:07, Thiago Macieira wrote: > Conclusion: > > There are risks associated with this fix, including a change of behaviour. > Those are well understood and are deemed acceptable in face of the fix itself. Just to say, that I agree with this. The fix should be included in any po

[Development] The shmget security fix

2013-02-20 Thread Thiago Macieira
Starting a thread to discuss the fix and whether its fix is appropriate. The fix can be divided in two parts: 1) the use of shmget in QSharedMemory to implement the public API of sharing memory 2) internal uses of shmget, subdividing into: a) internal uses inside Qt only, never with third-part