aboutsummaryrefslogtreecommitdiffstats
path: root/sysutils/cdrtools
diff options
context:
space:
mode:
authormarius <marius@FreeBSD.org>2004-08-29 22:40:24 +0800
committermarius <marius@FreeBSD.org>2004-08-29 22:40:24 +0800
commitbebdc782dbe17779d14b96aabc4bd57c04a09c96 (patch)
treec0cb957031c4c2cbf643304a8c2859cb08c5620e /sysutils/cdrtools
parentab7c2fa67e6f3519108cce07aa7798d4f984fbfc (diff)
downloadfreebsd-ports-gnome-bebdc782dbe17779d14b96aabc4bd57c04a09c96.tar.gz
freebsd-ports-gnome-bebdc782dbe17779d14b96aabc4bd57c04a09c96.tar.zst
freebsd-ports-gnome-bebdc782dbe17779d14b96aabc4bd57c04a09c96.zip
Fix a security bug in the rscsi client code.
Approved by: netchild Obtained from: cdrtools 2.01a38
Diffstat (limited to 'sysutils/cdrtools')
-rw-r--r--sysutils/cdrtools/Makefile2
-rw-r--r--sysutils/cdrtools/files/patch-librscg::scsi-remote.c16
2 files changed, 17 insertions, 1 deletions
diff --git a/sysutils/cdrtools/Makefile b/sysutils/cdrtools/Makefile
index 068efd797988..6c011dc6a10e 100644
--- a/sysutils/cdrtools/Makefile
+++ b/sysutils/cdrtools/Makefile
@@ -7,7 +7,7 @@
PORTNAME= cdrtools
PORTVERSION?= 2.0.3
-PORTREVISION?= 3
+PORTREVISION?= 4
CATEGORIES?= sysutils audio
MASTER_SITES= ftp://ftp.berlios.de/pub/cdrecord/ \
ftp://ftp.cs.tu-berlin.de/pub/misc/cdrecord/ \
diff --git a/sysutils/cdrtools/files/patch-librscg::scsi-remote.c b/sysutils/cdrtools/files/patch-librscg::scsi-remote.c
new file mode 100644
index 000000000000..ee8e1039d1d6
--- /dev/null
+++ b/sysutils/cdrtools/files/patch-librscg::scsi-remote.c
@@ -0,0 +1,16 @@
+--- librscg/scsi-remote.c.orig Thu Jan 15 01:25:09 2004
++++ librscg/scsi-remote.c Tue Aug 24 00:11:42 2004
+@@ -1074,6 +1074,13 @@
+ if (getuid() != pw->pw_uid &&
+ setuid(pw->pw_uid) == -1) {
+ errmsg("setuid(%lld) failed.\n",
++ (Llong)pw->pw_uid);
++ _exit(EX_BAD);
++ /* NOTREACHED */
++ }
++ if (getuid() != geteuid() &&
++ seteuid(pw->pw_uid) == -1) {
++ errmsg("seteuid(%lld) failed.\n",
+ (Llong)pw->pw_uid);
+ _exit(EX_BAD);
+ /* NOTREACHED */