[PD-cvs] pd/src s_inter.c,1.5.4.10.2.21,1.5.4.10.2.22

Mathieu Bouchard matju at users.sourceforge.net
Thu Nov 23 20:32:09 CET 2006


Update of /cvsroot/pure-data/pd/src
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv7983

Modified Files:
      Tag: devel_0_39
	s_inter.c 
Log Message:
security fix for setuid.


Index: s_inter.c
===================================================================
RCS file: /cvsroot/pure-data/pd/src/s_inter.c,v
retrieving revision 1.5.4.10.2.21
retrieving revision 1.5.4.10.2.22
diff -C2 -d -r1.5.4.10.2.21 -r1.5.4.10.2.22
*** s_inter.c	19 Nov 2006 08:02:55 -0000	1.5.4.10.2.21
--- s_inter.c	23 Nov 2006 19:32:05 -0000	1.5.4.10.2.22
***************
*** 1074,1078 ****
          else if (!childpid)                     /* we're the child */
          {
!             seteuid(getuid());          /* lose setuid priveliges */
  #ifndef __APPLE__
                  /* the wish process in Unix will make a wish shell and
--- 1074,1078 ----
          else if (!childpid)                     /* we're the child */
          {
!             setuid(getuid());          /* lose setuid priveliges */
  #ifndef __APPLE__
                  /* the wish process in Unix will make a wish shell and
***************
*** 1250,1254 ****
          if (pipe(pipe9) < 0)
          {
!             seteuid(getuid());      /* lose setuid priveliges */
              sys_sockerror("pipe");
              return (1);
--- 1250,1254 ----
          if (pipe(pipe9) < 0)
          {
!             setuid(getuid());      /* lose setuid priveliges */
              sys_sockerror("pipe");
              return (1);
***************
*** 1257,1261 ****
          if (watchpid < 0)
          {
!             seteuid(getuid());      /* lose setuid priveliges */
              if (errno)
                  perror("sys_startgui");
--- 1257,1261 ----
          if (watchpid < 0)
          {
!             setuid(getuid());      /* lose setuid priveliges */
              if (errno)
                  perror("sys_startgui");
***************
*** 1266,1270 ****
          {
              sys_set_priority(1);
!             seteuid(getuid());      /* lose setuid priveliges */
              if (pipe9[1] != 0)
              {
--- 1266,1270 ----
          {
              sys_set_priority(1);
!             setuid(getuid());      /* lose setuid priveliges */
              if (pipe9[1] != 0)
              {
***************
*** 1283,1287 ****
          {
              sys_set_priority(0);
!             seteuid(getuid());      /* lose setuid priveliges */
              close(pipe9[0]);
              sys_watchfd = pipe9[1];
--- 1283,1287 ----
          {
              sys_set_priority(0);
!             setuid(getuid());      /* lose setuid priveliges */
              close(pipe9[0]);
              sys_watchfd = pipe9[1];
***************
*** 1295,1299 ****
      }
  
!     seteuid(getuid());          /* lose setuid priveliges */
  #endif /* __linux__ */
  
--- 1295,1299 ----
      }
  
!     setuid(getuid());          /* lose setuid priveliges */
  #endif /* __linux__ */
  





More information about the Pd-cvs mailing list