[asterisk-bugs] [Asterisk 0010781]: [patch] Doesn't lock config files when writing

[noreply at bugs.digium.com]

The following issue has been CLOSED 
====================================================================== 
http://bugs.digium.com/view.php?id=10781 
====================================================================== 
Reported By:                paravoid
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   10781
Category:                   Core/Configuration
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     closed
Asterisk Version:           1.4.13  
SVN Branch (only for SVN checkouts, not tarball releases): N/A  
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
Resolution:                 suspended
Fixed in Version:           
====================================================================== 
Date Submitted:             09-21-2007 00:48 CDT
Last Modified:              11-12-2007 14:06 CST
====================================================================== 
Summary:                    [patch] Doesn't lock config files when writing
Description: 
Asterisk does not use flock() to lock configuration files when writing them
on config_text_file_save().

This was originally reported as Debian bug
http://bugs.digium.com/view.php?id=353227 by John Goerzen. In his
own words:
"It appears to not protect the file even against itself.  It certainly
doesn't use flock() to protect it against others.

This is a problem for several reasons.  First, of course, people can be
hand-editing the file to add or remove users.  Secondly, automated
programs may be appending data to it for the same purpose.

We've noticed corruption in our file and are almost certain that this is
the culprit."
====================================================================== 

---------------------------------------------------------------------- 
 Corydon76 - 11-12-07 14:06  
---------------------------------------------------------------------- 
Reporter lost interest. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
11-12-07 14:06  Corydon76      Asterisk Version         1.4.11  => 1.4.13   
11-12-07 14:06  Corydon76      Note Added: 0073541                          
11-12-07 14:06  Corydon76      Status                   ready for testing =>
closed
11-12-07 14:06  Corydon76      Resolution               open => suspended   
======================================================================