time-of-check, time-of-use race condition
- Dominant language
- C
- Stars
- 221
- Forks
- 42
- PR merge metrics
- No merged PRs in 30d
Description
Team,
File: libsmbios/blob/master/src/libsmbios_c/smi/smi_linux.c#L307
```
int __hidden wmi_supported()
{
if (access(wmi_char, F_OK) != -1)
return 1;
return 0;
}
```
I believe this indicates a security flaw, If an attacker can change anything along the path between the call `access()` and the files actually used, attacker may exploit the race condition or a time-of-check, time-of-use race condition, request team to please have a look and validate.
Reference: https://linux.die.net/man/2/access
Contributor guide
No contributing guide indexed for this repository
Research direction
Read libsmbios/blob/master/src/libsmbios_c/smi/smi_linux.c around line 307 and review the access(2) reference. Determine whether wmi_supported() creates an exploitable check/use race in this code path; done means the security concern is validated or dismissed and an agreed remediation scope is recorded.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- c
- Domain
- operating-systems, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100