Bug 697193

Summary: status should check PermitFileReading
Product: Ghostscript Reporter: Tavis Ormandy <taviso>
Component: GeneralAssignee: Chris Liddell (chrisl) <chris.liddell>
Status: RESOLVED FIXED    
Severity: minor CC: chris.liddell
Priority: P4    
Version: 9.20   
Hardware: PC   
OS: Linux   
Customer: Word Size: ---

Description Tavis Ormandy 2016-10-05 08:54:51 UTC
status doesn't require the filename to match PermitFileReading, I think this is a minor -dSAFER bug because it can leak the existence and size of filenames.
Comment 1 Chris Liddell (chrisl) 2016-10-08 09:14:42 UTC
Fixed in:
http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=b60d50b7