forked from enlightenment/efl
9fa4a5fb6d
Summary: Currentely, if eet_read_cipher()'s cipher_key param is exist but file not ciphered, function always read and return successful result. But, this behavior can not check data integrity. e.g. 1. App create config file using eet with encryption key. 2. Attacker replace config to malicious config (not encryted). 3. App can not notice if eet_read_cipher() read that successfully. @fix Test Plan: $eet -e test.cfg my_config test.src 1 $eet -d test.cfg my_config decode_res.txt my_encrytion_key (Currentely decode success, but should be failed) Reviewers: woohyun, raster Subscribers: id213sin, akanad, cedric, jpeg Differential Revision: https://phab.enlightenment.org/D4563 Signed-off-by: Cedric BAIL <cedric@osg.samsung.com> |
||
---|---|---|
.. | ||
benchmarks | ||
bin | ||
bindings | ||
edje_external | ||
examples | ||
generic | ||
lib | ||
modules | ||
scripts | ||
static_libs | ||
tests | ||
utils/ecore | ||
wayland_protocol | ||
CMakeLists.txt | ||
CMakeLists_Eina.txt | ||
Makefile.am | ||
Makefile_Cxx.am | ||
Makefile_EPhysics.am | ||
Makefile_Ecore.am | ||
Makefile_Ecore_Audio.am | ||
Makefile_Ecore_Avahi.am | ||
Makefile_Ecore_Buffer.am | ||
Makefile_Ecore_Cocoa.am | ||
Makefile_Ecore_Con.am | ||
Makefile_Ecore_Drm.am | ||
Makefile_Ecore_Drm2.am | ||
Makefile_Ecore_Evas.am | ||
Makefile_Ecore_FB.am | ||
Makefile_Ecore_File.am | ||
Makefile_Ecore_IMF.am | ||
Makefile_Ecore_IMF_Evas.am | ||
Makefile_Ecore_Input.am | ||
Makefile_Ecore_Input_Evas.am | ||
Makefile_Ecore_Ipc.am | ||
Makefile_Ecore_Js.am | ||
Makefile_Ecore_Psl1ght.am | ||
Makefile_Ecore_SDL.am | ||
Makefile_Ecore_Wayland.am | ||
Makefile_Ecore_Win32.am | ||
Makefile_Ecore_Wl2.am | ||
Makefile_Ecore_X.am | ||
Makefile_Ector.am | ||
Makefile_Edje.am | ||
Makefile_Edje_Helper.am | ||
Makefile_Eet.am | ||
Makefile_Eet_Helper.am | ||
Makefile_Eeze.am | ||
Makefile_Efl.am | ||
Makefile_Efl_Js.am | ||
Makefile_Efreet.am | ||
Makefile_Eina.am | ||
Makefile_Eio.am | ||
Makefile_Eldbus.am | ||
Makefile_Elementary.am | ||
Makefile_Elocation.am | ||
Makefile_Elput.am | ||
Makefile_Elua.am | ||
Makefile_Elua_Helper.am | ||
Makefile_Embryo.am | ||
Makefile_Emile.am | ||
Makefile_Emotion.am | ||
Makefile_Eo.am | ||
Makefile_Eolian.am | ||
Makefile_Eolian_Cxx.am | ||
Makefile_Eolian_Cxx_Helper.am | ||
Makefile_Eolian_Files_Helper.am | ||
Makefile_Eolian_Helper.am | ||
Makefile_Eolian_Js.am | ||
Makefile_Eolian_Js_Helper.am | ||
Makefile_Escape.am | ||
Makefile_Ethumb.am | ||
Makefile_Ethumb_Client.am | ||
Makefile_Evas.am | ||
Makefile_Evil.am |