diff options
| author | marcus <marcus@FreeBSD.org> | 2002-09-13 12:03:50 +0800 |
|---|---|---|
| committer | marcus <marcus@FreeBSD.org> | 2002-09-13 12:03:50 +0800 |
| commit | b5266d3fc7ff38079fcd41648bf838618135dc57 (patch) | |
| tree | 15c05b5c9dbe382ff4306cc2e8f88ae1729833a5 /textproc/scrollkeeper | |
| parent | 5f967ce2d5c3602aea0415809af328249b0afe65 (diff) | |
| download | freebsd-ports-gnome-b5266d3fc7ff38079fcd41648bf838618135dc57.tar.gz freebsd-ports-gnome-b5266d3fc7ff38079fcd41648bf838618135dc57.tar.zst freebsd-ports-gnome-b5266d3fc7ff38079fcd41648bf838618135dc57.zip | |
Attempt to fix a security bug in scrollkeeper in which the code will follow
symlinks when attempting to locate a temp file. Note, this is not the
author's patch, but one of my own. I think this should fix it, but I'm
not sure if I'm missing something. The patch is based on the description
from securityfocus.com.
See http://online.securityfocus.com/bid/5602/info/ for more details.
Reported by: Daniel Harris <dh@askdh.com>
Diffstat (limited to 'textproc/scrollkeeper')
| -rw-r--r-- | textproc/scrollkeeper/Makefile | 2 | ||||
| -rw-r--r-- | textproc/scrollkeeper/files/patch-cl_src_get-cl.c | 11 |
2 files changed, 12 insertions, 1 deletions
diff --git a/textproc/scrollkeeper/Makefile b/textproc/scrollkeeper/Makefile index 94d72cb39060..24956167a44b 100644 --- a/textproc/scrollkeeper/Makefile +++ b/textproc/scrollkeeper/Makefile @@ -7,7 +7,7 @@ PORTNAME= scrollkeeper PORTVERSION= 0.3.11 -PORTREVISION= 1 +PORTREVISION= 2 PORTEPOCH= 1 CATEGORIES= textproc gnome MASTER_SITES= ${MASTER_SITE_GNOME} diff --git a/textproc/scrollkeeper/files/patch-cl_src_get-cl.c b/textproc/scrollkeeper/files/patch-cl_src_get-cl.c new file mode 100644 index 000000000000..c19108275e2c --- /dev/null +++ b/textproc/scrollkeeper/files/patch-cl_src_get-cl.c @@ -0,0 +1,11 @@ +--- cl/src/get-cl.c.orig Thu Sep 12 23:54:01 2002 ++++ cl/src/get-cl.c Thu Sep 12 23:54:44 2002 +@@ -44,7 +44,7 @@ + + for(i = 0; i < 5; i++) { + snprintf(path, PATHLEN, "/tmp/scrollkeeper-tempfile.%d", i); +- if (stat(path, &buf) == -1) { ++ if (lstat(path, &buf) == -1) { + if (errno == ENOENT) { + /* this is an empty slot so use it */ + |