diff options
| author | marius <marius@FreeBSD.org> | 2004-08-29 22:40:24 +0800 |
|---|---|---|
| committer | marius <marius@FreeBSD.org> | 2004-08-29 22:40:24 +0800 |
| commit | bebdc782dbe17779d14b96aabc4bd57c04a09c96 (patch) | |
| tree | c0cb957031c4c2cbf643304a8c2859cb08c5620e /sysutils | |
| parent | ab7c2fa67e6f3519108cce07aa7798d4f984fbfc (diff) | |
| download | freebsd-ports-gnome-bebdc782dbe17779d14b96aabc4bd57c04a09c96.tar.gz freebsd-ports-gnome-bebdc782dbe17779d14b96aabc4bd57c04a09c96.tar.zst freebsd-ports-gnome-bebdc782dbe17779d14b96aabc4bd57c04a09c96.zip | |
Fix a security bug in the rscsi client code.
Approved by: netchild
Obtained from: cdrtools 2.01a38
Diffstat (limited to 'sysutils')
| -rw-r--r-- | sysutils/cdrtools/Makefile | 2 | ||||
| -rw-r--r-- | sysutils/cdrtools/files/patch-librscg::scsi-remote.c | 16 |
2 files changed, 17 insertions, 1 deletions
diff --git a/sysutils/cdrtools/Makefile b/sysutils/cdrtools/Makefile index 068efd797988..6c011dc6a10e 100644 --- a/sysutils/cdrtools/Makefile +++ b/sysutils/cdrtools/Makefile @@ -7,7 +7,7 @@ PORTNAME= cdrtools PORTVERSION?= 2.0.3 -PORTREVISION?= 3 +PORTREVISION?= 4 CATEGORIES?= sysutils audio MASTER_SITES= ftp://ftp.berlios.de/pub/cdrecord/ \ ftp://ftp.cs.tu-berlin.de/pub/misc/cdrecord/ \ diff --git a/sysutils/cdrtools/files/patch-librscg::scsi-remote.c b/sysutils/cdrtools/files/patch-librscg::scsi-remote.c new file mode 100644 index 000000000000..ee8e1039d1d6 --- /dev/null +++ b/sysutils/cdrtools/files/patch-librscg::scsi-remote.c @@ -0,0 +1,16 @@ +--- librscg/scsi-remote.c.orig Thu Jan 15 01:25:09 2004 ++++ librscg/scsi-remote.c Tue Aug 24 00:11:42 2004 +@@ -1074,6 +1074,13 @@ + if (getuid() != pw->pw_uid && + setuid(pw->pw_uid) == -1) { + errmsg("setuid(%lld) failed.\n", ++ (Llong)pw->pw_uid); ++ _exit(EX_BAD); ++ /* NOTREACHED */ ++ } ++ if (getuid() != geteuid() && ++ seteuid(pw->pw_uid) == -1) { ++ errmsg("seteuid(%lld) failed.\n", + (Llong)pw->pw_uid); + _exit(EX_BAD); + /* NOTREACHED */ |