You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A bypass for the maxturnins argument on LIMITS file has been found possible under certain conditions.
More specifically, a user that has initiated a turnin that is legal in terms of quota can finalise the submission even if the course changes the maxturnins during the process of submission.
Steps to reproduce:
Run turnin assignment@course file.c as user and finalise the turn in
Run turnin assignment@course file.c as user and wait before pressing the final y.
Run echo "maxturnins 1" > ~/TURNIN/assignment/LIMITSas course.
Press y as user on the second turnin.
Abuse of this race condition is detectable through the LOGFILE and SHA256 since it marks the submission sequentially, even if it's over the maximum allowed limit.
The text was updated successfully, but these errors were encountered:
A bypass for the
maxturnins
argument onLIMITS
file has been found possible under certain conditions.More specifically, a user that has initiated a
turnin
that is legal in terms of quota can finalise the submission even if the course changes themaxturnins
during the process of submission.Steps to reproduce:
turnin assignment@course file.c
asuser
and finalise the turn inturnin assignment@course file.c
asuser
and wait before pressing the finaly
.echo "maxturnins 1" > ~/TURNIN/assignment/LIMITS
ascourse
.y
asuser
on the secondturnin
.Abuse of this race condition is detectable through the
LOGFILE
andSHA256
since it marks the submission sequentially, even if it's over the maximum allowed limit.The text was updated successfully, but these errors were encountered: