Camelia, the Perl 6 bug

IRC log for #darcs, 2013-11-03

| Channels | #darcs index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:01 whaletechno joined #darcs
00:04 int-e transfer-mode looks read-only, but prone to directory traversal, so should not be trusted blindly. http://hub.darcs.net/darcs/darcs-reviewed/b​rowse/src/Darcs/UI/Commands/TransferMode.hs
00:04 int-e (paths are not validated at all)
00:06 sm thanks int-e. I see, transfer-mode only gets files, for now at least.
00:07 sm do you mean it can read any file ? isn't it limited to within the darcs repo ?
00:08 int-e the path is passed directly to B.readFile
00:09 sm I guess that's alright, a ssh user can use darcs transfer-mode to get any file they could otherwise get with scp
00:09 int-e get /etc/passwd
00:09 sm yup
00:09 int-e works :)
00:09 int-e yes, just thought it was worth mentioning :)
00:10 preflex joined #darcs
00:10 sm oh wait, works for any darcs hub user ? that's not good :)
00:10 sm excellent catch, int-e
00:10 sm so I'll allow transfer-mode on any repo the user is allowed to read. But first, I need to limit transfer-mode to within the repo
00:17 sm int-e: wait, hub.darcs.net doesn't allow that
00:38 favonia joined #darcs
01:08 sm so all is well. And http://hub.darcs.net/simon/darcsden/issue/89 is fixed
01:29 koninkje joined #darcs
02:06 intripoon_ joined #darcs
02:39 arpunk_ joined #darcs
04:10 alexei___ joined #darcs
04:14 mizu_no_oto joined #darcs
04:34 mizu_no_oto joined #darcs
04:51 preflex_ joined #darcs
06:00 favonia joined #darcs
06:59 mizu_no_oto joined #darcs
08:33 lelit joined #darcs
08:38 whaletechno joined #darcs
08:49 whaletechno joined #darcs
09:29 gbeshers joined #darcs
09:52 kowey joined #darcs
10:31 donri joined #darcs
11:28 alexei___ joined #darcs
12:39 arpunk joined #darcs
14:00 gbeshers joined #darcs
15:19 alexei___ joined #darcs
15:21 gh_ joined #darcs
15:40 gh_ joined #darcs
16:13 gh_ joined #darcs
16:28 raichoo joined #darcs
17:02 mizu_no_oto joined #darcs
17:53 whaletechno joined #darcs
17:54 mizu_no_oto joined #darcs
18:36 alexei___ joined #darcs
19:04 drostie joined #darcs
19:11 gbeshers joined #darcs
19:21 dolio joined #darcs
20:44 schlaftier joined #darcs
21:04 schlaftier joined #darcs
21:29 MasseR joined #darcs
21:45 amgarchIn9 joined #darcs
22:07 MasseR joined #darcs
22:32 gh_ joined #darcs
22:43 arpunk joined #darcs
22:44 xymox joined #darcs
23:12 sm I've released darcsum 1.3
23:13 sm and submitted a pull request for the MELPA package. http://joyful.com/darcsum
23:22 stepkut joined #darcs

| Channels | #darcs index | Today | | Search | Google Search | Plain-Text | summary