Ubuntu UI Toolkit

  1. Bug #1348241
  2. Comment #1

Comment 1 for bug 1348241

Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

from modules/Ubuntu/Components/plugin/statesaverbackend_p.cpp:

    m_archive = new QSettings(QString("%1/%2.state")
                              .arg(QStandardPaths::standardLocations(QStandardPaths::TempLocation)[0])
                              .arg(applicationName), QSettings::NativeFormat);

QStandardPaths::TempLocation is /tmp by default.

This gets CVE-2014-1420