annotate SECURITY.md @ 34394:a400c8f9506f v9.1.0123

patch 9.1.0123: MS-Windows: system() may deadlock Commit: https://github.com/vim/vim/commit/52ecc76c7fa1865603f27bc838efaeaa03cad77c Author: GuyBrush <miguel.barro@live.com> Date: Wed Feb 21 20:16:38 2024 +0100 patch 9.1.0123: MS-Windows: system() may deadlock Problem: MS-Windows: system() may deadlock when calling binaries that expect stdin Solution: Ignore the SHELL_EXPAND flag (GuyBrush) This happens on binaries that expect stdin. For example: :echo system("xxd") will cause a deadlock. SHELL_EXPAND is a flag devoted to support the linux implementation of the backtick-expansion mechanism. On linux backtic-expansion relies in the function mch_expand_wildchars() (os_unix.c) that delegates on each specific shell (bash, sh, csh, zsh) the expansion. Basically it composes a shell command that does the expansion and redirects the output to a file and call_shell() it. On windows backtick-expansion is performed by Vim itself. On linux SHELL_EXPAND modifies how mch_call_shell_fork() (os_unix.c) works. This function: - relies on posix fork() to spawn a child process to execute a external command. - Child and parent process communicate using pipes (or pseudoterminal if available). User input (type ahead content) is processed in a loop only if !(SHELL_EXPAND || SHELL_COOKED). Though signals are used to detect Ctrl-C in all cases (the input loop is not necessary to interrupt the function). In the backtick-expansion the external command is the shell command that provides the expansion. For the child redirection: - SHELL_EXPAND replaces stdin, stdout & stderr to /dev/null. This is why the shell command composed includes redirection (otherwise output would be lost). - !SHELL_EXPAND replaces stdin, stdout & stderr with the parent created pipes (or pseudoterminal). Note that the use of SIGINT signal prevents mch_call_shell_fork() from hanging vim. On Windows mch_system_piped() (os_win32.c) (which is only used when the GUI is running) mimics mch_call_shell_fork() (os_unix.c). Win32 lacks fork() and relies on CreateProcessW() and only has pipe support (not pseudoterminal) which makes the implementation much different. But, the key idea is that windows lacks signals, the OS provides support for console apps but gvim is not one. The only way of detecting a Ctrl-C is actually processing user input (type ahead content). By ignoring the user input under SHELL_EXPAND the function can hang gvim. Ignoring SHELL_EXPAND flag has no consequence in Windows because as mentioned above it is only meaningful in linux. closes: #13988 Signed-off-by: GuyBrush <miguel.barro@live.com> Signed-off-by: Christian Brabandt <cb@256bit.org>
author Christian Brabandt <cb@256bit.org>
date Wed, 21 Feb 2024 20:30:02 +0100
parents 13e4398925ea
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
32717
b807b0aa8e1f Add security policy (#12687)
Christian Brabandt <cb@256bit.org>
parents:
diff changeset
1 # Security Policy
b807b0aa8e1f Add security policy (#12687)
Christian Brabandt <cb@256bit.org>
parents:
diff changeset
2
b807b0aa8e1f Add security policy (#12687)
Christian Brabandt <cb@256bit.org>
parents:
diff changeset
3 ## Reporting a vulnerability
b807b0aa8e1f Add security policy (#12687)
Christian Brabandt <cb@256bit.org>
parents:
diff changeset
4
33648
13e4398925ea please report security issues to the vim-security list
Christian Brabandt <cb@256bit.org>
parents: 33616
diff changeset
5 If you want to report a security issue, please privately disclose the issue to the vim-security mailing list
13e4398925ea please report security issues to the vim-security list
Christian Brabandt <cb@256bit.org>
parents: 33616
diff changeset
6 vim-security@googlegroups.com
13e4398925ea please report security issues to the vim-security list
Christian Brabandt <cb@256bit.org>
parents: 33616
diff changeset
7
13e4398925ea please report security issues to the vim-security list
Christian Brabandt <cb@256bit.org>
parents: 33616
diff changeset
8 This is a private list, read only by the maintainers, but anybody can post, after moderation.
32717
b807b0aa8e1f Add security policy (#12687)
Christian Brabandt <cb@256bit.org>
parents:
diff changeset
9
b807b0aa8e1f Add security policy (#12687)
Christian Brabandt <cb@256bit.org>
parents:
diff changeset
10 **Please don't publicly disclose the issue until it has been addressed by us.**