dumpwallet walletfile overwrite footgun #9934

issue gmaxwell opened this issue on March 7, 2017
  1. gmaxwell commented at 3:05 AM on March 7, 2017: contributor

    19:02 < $user> gmaxwell: I have the new version. I opened the console. I ran dumpwallet, and it's not giving anything back to me. I passed wallet.dat and /Users/pawn/Library/Application\ Support/Bitcoin/wallet.dat as an argument.

  2. laanwj added the label RPC/REST/ZMQ on Mar 7, 2017
  3. laanwj commented at 8:08 AM on March 7, 2017: member

    This is one of the reasons I'd be happier if it would stream the data over the socket, so that the client-side can handle it, instead of overwriting an arbitrary server-side file (which shouldn't even work with proper sandboxing).

    A quick fix would just be to disallow it overwriting files (possibly overridable with an argument though I'd prefer not).

  4. laanwj referenced this in commit 1307cd79b8 on Mar 7, 2017
  5. laanwj cross-referenced this on Mar 7, 2017 from issue rpc: Prevent `dumpwallet` from overwriting files by laanwj
  6. laanwj commented at 8:53 AM on March 7, 2017: member

    See #9937.

  7. laanwj cross-referenced this on Mar 27, 2017 from issue Add 'dumpbootstrap' RPC for creating bootstrap.dat files. by dooglus
  8. laanwj referenced this in commit cc928c5837 on Sep 22, 2017
  9. laanwj referenced this in commit 0cd9273fd9 on Sep 26, 2017
  10. laanwj closed this on Oct 4, 2017

  11. laanwj referenced this in commit 7f11ef2608 on Oct 4, 2017
  12. MarcoFalke referenced this in commit a43be5bcdb on Oct 4, 2017
  13. HashUnlimited referenced this in commit 2ddf6729bc on Mar 12, 2018
  14. attilaaf referenced this in commit c2ed1f0bed on May 25, 2019
  15. codablock referenced this in commit 9e3cb7599e on Sep 25, 2019
  16. barrystyle referenced this in commit 788faa875a on Jan 22, 2020
  17. bitcoin locked this on Sep 8, 2021

github-metadata-mirror

This is a metadata mirror of the GitHub repository bitcoin/bitcoin. This site is not affiliated with GitHub. Content is generated from a GitHub metadata backup.
generated: 2026-05-19 06:54 UTC