Bugzilla – Attachment 50539 Details for
Bug 118182
VUL-0: arc insecure temp file creation
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
IDP Log In
|
Forgot Password
[patch]
patch.CAN-2005-2945.arc
patch.CAN-2005-2945.arc (text/plain), 648 bytes, created by
Thomas Biege
on 2005-09-21 14:10:02 UTC
(
hide
)
Description:
patch.CAN-2005-2945.arc
Filename:
MIME Type:
Creator:
Thomas Biege
Created:
2005-09-21 14:10:02 UTC
Size:
648 bytes
patch
obsolete
>--- arc-5.21l.orig/arcsvc.c >+++ arc-5.21l/arcsvc.c >@@ -17,6 +17,9 @@ > Computer Innovations Optimizing C86 > */ > #include <stdio.h> >+#include <sys/types.h> >+#include <sys/stat.h> >+#include <fcntl.h> > #include "arc.h" > #if _MTS > #include <mts.h> >@@ -52,7 +55,12 @@ > } > #endif > if (chg) { /* if opening for changes */ >- if (!(new = fopen(newname, OPEN_W))) >+ int fd; >+ >+ if ((fd = open(newname, O_CREAT|O_EXCL|O_RDWR, S_IREAD|S_IWRITE)) == -1) >+ arcdie("Cannot create archive copy: %s", newname); >+ >+ if (!(new = fdopen(fd, OPEN_W))) > arcdie("Cannot create archive copy: %s", newname); > > changing = chg; /* note if open for changes */
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=50539">View the attachment on a separate page</a>.</b>
Actions:
View
|
Diff
Attachments on
bug 118182
: 50539