5 ms·
Based on the readme, this is basically an SFX archive, which runs a binary upon completion of extraction to temporary folder, much like winzip & the like have c
by dmitrygr 8y ago
Based on the readme, this is basically an SFX archive, which runs a binary upon completion of extraction to temporary folder, much like winzip & the like have created for ages.
- munk-a 8y agoThat's a bit odd, with weird system configuration you'd still be able to inject a bad .dll or .so as a priority shared library. I don't know why you wouldn't just prefer to bundle all the function references into a single binary blob.
- GordonS 8y agoIt was me that posted this link, and I must confess I did so before reading the full readme. I had assumed this was some kind of clever AoT tool... but after reading more, I was rather disappointed :( I'm sure this still has some uses, but they are rather limited, and very dull.
- paavoova 8y agoHaven't read the link, but that's quite terrible, and the title is misleading. No idea why it's getting buzz in this thread. It means if tmpfs/equivalent isn't available, it will cause disk writes each application launch. Or if it caches the unpacking, it's susceptible to injection. And suppose the binary doesn't have write access to the filesystem?
- GordonS 8y agoIt's the latter - it caches and is susceptible to injection.