[PD-cvs] pd/src s_inter.c,1.14,1.14.4.1
Miller Puckette
millerpuckette at users.sourceforge.net
Wed Jul 18 01:34:14 CEST 2007
Update of /cvsroot/pure-data/pd/src
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv10594/pd/src
Modified Files:
Tag: stable_0_39
s_inter.c
Log Message:
changed seteuid() calls to setuid() to close security hole
Index: s_inter.c
===================================================================
RCS file: /cvsroot/pure-data/pd/src/s_inter.c,v
retrieving revision 1.14
retrieving revision 1.14.4.1
diff -C2 -d -r1.14 -r1.14.4.1
*** s_inter.c 15 Oct 2005 23:14:28 -0000 1.14
--- s_inter.c 17 Jul 2007 23:34:12 -0000 1.14.4.1
***************
*** 1018,1022 ****
else if (!childpid) /* we're the child */
{
! seteuid(getuid()); /* lose setuid priveliges */
#ifndef MACOSX
/* the wish process in Unix will make a wish shell and
--- 1018,1022 ----
else if (!childpid) /* we're the child */
{
! setuid(getuid()); /* lose setuid priveliges */
#ifndef MACOSX
/* the wish process in Unix will make a wish shell and
***************
*** 1155,1159 ****
if (pipe(pipe9) < 0)
{
! seteuid(getuid()); /* lose setuid priveliges */
sys_sockerror("pipe");
return (1);
--- 1155,1159 ----
if (pipe(pipe9) < 0)
{
! setuid(getuid()); /* lose setuid priveliges */
sys_sockerror("pipe");
return (1);
***************
*** 1162,1166 ****
if (watchpid < 0)
{
! seteuid(getuid()); /* lose setuid priveliges */
if (errno)
perror("sys_startgui");
--- 1162,1166 ----
if (watchpid < 0)
{
! setuid(getuid()); /* lose setuid priveliges */
if (errno)
perror("sys_startgui");
***************
*** 1171,1175 ****
{
sys_set_priority(1);
! seteuid(getuid()); /* lose setuid priveliges */
if (pipe9[1] != 0)
{
--- 1171,1175 ----
{
sys_set_priority(1);
! setuid(getuid()); /* lose setuid priveliges */
if (pipe9[1] != 0)
{
***************
*** 1188,1192 ****
{
sys_set_priority(0);
! seteuid(getuid()); /* lose setuid priveliges */
close(pipe9[0]);
sys_watchfd = pipe9[1];
--- 1188,1192 ----
{
sys_set_priority(0);
! setuid(getuid()); /* lose setuid priveliges */
close(pipe9[0]);
sys_watchfd = pipe9[1];
***************
*** 1196,1200 ****
}
! seteuid(getuid()); /* lose setuid priveliges */
#endif /* __linux__ */
--- 1196,1200 ----
}
! setuid(getuid()); /* lose setuid priveliges */
#endif /* __linux__ */
More information about the Pd-cvs
mailing list