Bugzilla – Attachment 25553 Details for
Bug 62724
VUL-0: CVE-2004-0966: gettext: two tmp races
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
IDP Log In
|
Forgot Password
[patch]
gettextize-sec-tmprace.diff (new)
gettextize-sec-tmprace.diff (text/plain), 1.24 KB, created by
Thomas Biege
on 2004-10-28 17:33:52 UTC
(
hide
)
Description:
gettextize-sec-tmprace.diff (new)
Filename:
MIME Type:
Creator:
Thomas Biege
Created:
2004-10-28 17:33:52 UTC
Size:
1.24 KB
patch
obsolete
>--- ./gettext-0.12.1/gettext-tools/misc/gettextize.in.orig 2004-10-28 11:26:08.000000000 +0200 >+++ ./gettext-0.12.1/gettext-tools/misc/gettextize.in 2004-10-28 11:28:19.000000000 +0200 >@@ -21,6 +21,8 @@ > # internationalize their package with the help of GNU gettext. For > # further information how to use it consult the GNU gettext manual. > >+umask 077 >+ > progname=$0 > package=@PACKAGE@ > version=@VERSION@ >@@ -30,6 +32,8 @@ > prefix="@prefix@" > gettext_dir="@datadir@/gettext" > >+TMPFILE=$(mktemp /tmp/conf.sh.XXXXXX) || exit 1 >+ > # Support for relocatability. > func_find_curr_installdir () > { >@@ -39,14 +43,14 @@ > */* | *\\*) ;; > *) # Need to look in the PATH. > if test "${PATH_SEPARATOR+set}" != set; then >- { echo "#! /bin/sh"; echo "exit 0"; } > /tmp/conf$$.sh >- chmod +x /tmp/conf$$.sh >- if (PATH="/nonexistent;/tmp"; conf$$.sh) >/dev/null 2>&1; then >+ { echo "#! /bin/sh"; echo "exit 0"; } > $TMPFILE >+ chmod +x $TMPFILE >+ if (PATH="/nonexistent;/tmp"; $TMPFILE) >/dev/null 2>&1; then > PATH_SEPARATOR=';' > else > PATH_SEPARATOR=: > fi >- rm -f /tmp/conf$$.sh >+ rm -f $TMPFILE > fi > save_IFS="$IFS"; IFS="$PATH_SEPARATOR" > for dir in $PATH; do
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
Actions:
View
|
Diff
Attachments on
bug 62724
:
25551
|
25552
| 25553