SOURCES: lm_sensors-CAN-2005-2672.patch (NEW) - fix for CAN-2005-2...

[adamg]

Author: adamg                        Date: Wed Aug 31 07:46:07 2005 GMT
Module: SOURCES                       Tag: HEAD
---- Log message:
- fix for CAN-2005-2672 (insecure temporary file creation)
- release 3

---- Files affected:
SOURCES:
   lm_sensors-CAN-2005-2672.patch (NONE -> 1.1)  (NEW)

---- Diffs:

================================================================
Index: SOURCES/lm_sensors-CAN-2005-2672.patch
diff -u /dev/null SOURCES/lm_sensors-CAN-2005-2672.patch:1.1
--- /dev/null	Wed Aug 31 09:46:07 2005
+++ SOURCES/lm_sensors-CAN-2005-2672.patch	Wed Aug 31 09:46:02 2005
@@ -0,0 +1,18 @@
+diff -burN lm_sensors-2.9.1.orig/prog/pwm/pwmconfig lm_sensors-2.9.1/prog/pwm/pwmconfig
+--- lm_sensors-2.9.1.orig/prog/pwm/pwmconfig	2005-08-31 09:38:08.272485088 +0200
++++ lm_sensors-2.9.1/prog/pwm/pwmconfig	2005-08-31 09:40:43.701856232 +0200
+@@ -465,9 +465,11 @@
+ function SaveConfig {
+ 	echo
+ 	echo "Saving configuration to $FCCONFIG..."
+-	egrep -v '(INTERVAL|FCTEMPS|FCFANS|MAXTEMP|MINTEMP|MINSTART|MINSTOP)' $FCCONFIG >/tmp/fancontrol
+-	echo -e "INTERVAL=$INTERVAL\nFCTEMPS=$FCTEMPS\nFCFANS=$FCFANS\nMINTEMP=$MINTEMP\nMAXTEMP=$MAXTEMP\nMINSTART=$MINSTART\nMINSTOP=$MINSTOP" >>/tmp/fancontrol
+-	mv /tmp/fancontrol $FCCONFIG
++	tmpfile=`mktemp pwmconfig.XXXXXX` || { echo "$0: Cannot create temporary file" >&2; exit 1;  }
++	trap " [ -f \"$tmpfile\" ] && /bin/rm -f -- \"$tmpfile\"" 0 1 2 3 13 15
++	egrep -v '(INTERVAL|FCTEMPS|FCFANS|MAXTEMP|MINTEMP|MINSTART|MINSTOP)' $FCCONFIG >$tmpfile
++	echo -e "INTERVAL=$INTERVAL\nFCTEMPS=$FCTEMPS\nFCFANS=$FCFANS\nMINTEMP=$MINTEMP\nMAXTEMP=$MAXTEMP\nMINSTART=$MINSTART\nMINSTOP=$MINSTOP" >>$tmpfile
++	mv $tmpfile $FCCONFIG
+ 	#check if file was written correctly
+ 	echo 'Configuration saved'
+ }
================================================================