问题
Why are pipes considered dangerous to use? What can be done to avoid these security issues?
I'm mostly interested in Windows, but if you have other OS information, please provide.
回答1:
(assuming you're talking about Unix named pipes from the mention of 'c' and 'IPC'. Windows named pipes work somewhat differently)
Anyone with permissions can write to a named pipe, so you have to be careful with permissions and locking (see flock()). If an application trusts the input it's getting from the named pipe (which will usually be the case unless you explicitly build input validation into it) then a malicious user can write any desired data into the named pipe if they have permission.
Also, any user with permissions can read from the pipe and intercept data coming out of it if you have not exclusively locked it. The data is then missing from the input stream that the reader is expecting.
来源：https://stackoverflow.com/questions/192021/why-are-pipes-considered-dangerous-to-use-in-windows-unix-linux