SOURCES: bzip2-tempfile.patch (NEW) - fix insecure tmpfile creatio...

blues blues at pld-linux.org
Tue Jun 13 23:41:12 CEST 2006


Author: blues                        Date: Tue Jun 13 21:41:12 2006 GMT
Module: SOURCES                       Tag: HEAD
---- Log message:
- fix insecure tmpfile creation - taken from FC

---- Files affected:
SOURCES:
   bzip2-tempfile.patch (NONE -> 1.1)  (NEW)

---- Diffs:

================================================================
Index: SOURCES/bzip2-tempfile.patch
diff -u /dev/null SOURCES/bzip2-tempfile.patch:1.1
--- /dev/null	Tue Jun 13 23:41:12 2006
+++ SOURCES/bzip2-tempfile.patch	Tue Jun 13 23:41:07 2006
@@ -0,0 +1,11 @@
+--- bzip2-1.0.2/bzdiff.tempfile	2004-12-09 15:37:56.809670688 +0100
++++ bzip2-1.0.2/bzdiff	2004-12-09 15:46:05.169428720 +0100
+@@ -37,7 +37,7 @@
+ 	echo "Usage: $prog [${comp}_options] file [file]"
+ 	exit 1
+ fi
+-tmp=`tempfile -d /tmp -p bz` || {
++tmp=`/bin/mktemp ${TMPDIR:-/tmp}/bzdiff.XXXXXXXXXX` || {
+       echo 'cannot create a temporary file' >&2
+       exit 1
+ }
================================================================


More information about the pld-cvs-commit mailing list