[gentoo-commits] gentoo-x86 commit in net-dialup/mgetty/files: mgetty-1.1.36-tmpfile.patch

[gentoo-commits] gentoo-x86 commit in net-dialup/mgetty/files: mgetty-1.1.36-tmpfile.patch

[Alin Nastac (mrness)]

mrness      08/09/07 09:54:29

  Added:                mgetty-1.1.36-tmpfile.patch
  Log:
  Fix insecure temporary file usage (#235806).
  (Portage version: 2.1.4.4)

Revision  Changes    Path
1.1                  net-dialup/mgetty/files/mgetty-1.1.36-tmpfile.patch

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-dialup/mgetty/files/mgetty-1.1.36-tmpfile.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-dialup/mgetty/files/mgetty-1.1.36-tmpfile.patch?rev=1.1&content-type=text/plain

Index: mgetty-1.1.36-tmpfile.patch
===================================================================
diff -Nru mgetty-1.1.36.orig/fax/faxspool.in mgetty-1.1.36/fax/faxspool.in
--- mgetty-1.1.36.orig/fax/faxspool.in	2008-08-31 13:06:48.000000000 +0000
+++ mgetty-1.1.36/fax/faxspool.in	2008-09-07 09:44:01.000000000 +0000
@@ -675,9 +675,7 @@
     if [ x$file = x- ]
     then
 	$echo "spooling $file (stdin)..."
-	trap "rm /tmp/faxsp.$$" 0
-        cat - >/tmp/faxsp.$$
-	file=/tmp/faxsp.$$
+	file=$spooldir/faxsp
     else
 	$echo "spooling $file..."
     fi
@@ -924,7 +922,7 @@
 then
     $echo "\nnothing to do (no cover page, no data)." >&2
     cd $FAX_SPOOL_OUT
-    rmdir $spooldir
+    rm -rf $spooldir
     exit 52
 fi
 
@@ -965,7 +963,7 @@
 # clean up
 rm $job.q
 cd ..
-rmdir $spooldir
+rm -rf $spooldir
 
 if [ -z "`find $LAST_RUN -ctime -1 -print 2>/dev/null`" ]
 then

[gentoo-commits] gentoo-x86 commit in net-dialup/mgetty/files: mgetty-1.1.36-tmpfile.patch

[Alin Nastac (mrness)]

mrness      08/12/09 23:18:12

  Modified:             mgetty-1.1.36-tmpfile.patch
  Log:
  Fix tmpfile patch.
  (Portage version: 2.1.4.4, RepoMan options: --force)

Revision  Changes    Path
1.2                  net-dialup/mgetty/files/mgetty-1.1.36-tmpfile.patch

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-dialup/mgetty/files/mgetty-1.1.36-tmpfile.patch?rev=1.2&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-dialup/mgetty/files/mgetty-1.1.36-tmpfile.patch?rev=1.2&content-type=text/plain
diff : http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-dialup/mgetty/files/mgetty-1.1.36-tmpfile.patch?r1=1.1&r2=1.2

Index: mgetty-1.1.36-tmpfile.patch
===================================================================
RCS file: /var/cvsroot/gentoo-x86/net-dialup/mgetty/files/mgetty-1.1.36-tmpfile.patch,v
retrieving revision 1.1
retrieving revision 1.2
diff -u -r1.1 -r1.2
--- mgetty-1.1.36-tmpfile.patch	7 Sep 2008 09:54:29 -0000	1.1
+++ mgetty-1.1.36-tmpfile.patch	9 Dec 2008 23:18:12 -0000	1.2
@@ -1,7 +1,7 @@
 diff -Nru mgetty-1.1.36.orig/fax/faxspool.in mgetty-1.1.36/fax/faxspool.in
---- mgetty-1.1.36.orig/fax/faxspool.in	2008-08-31 13:06:48.000000000 +0000
-+++ mgetty-1.1.36/fax/faxspool.in	2008-09-07 09:44:01.000000000 +0000
-@@ -675,9 +675,7 @@
+--- mgetty-1.1.36.orig/fax/faxspool.in	2008-12-09 23:12:31.000000000 +0000
++++ mgetty-1.1.36/fax/faxspool.in	2008-12-09 23:13:28.000000000 +0000
+@@ -675,9 +675,8 @@
      if [ x$file = x- ]
      then
  	$echo "spooling $file (stdin)..."
@@ -9,10 +9,11 @@
 -        cat - >/tmp/faxsp.$$
 -	file=/tmp/faxsp.$$
 +	file=$spooldir/faxsp
++	cat - > $file
      else
  	$echo "spooling $file..."
      fi
-@@ -924,7 +922,7 @@
+@@ -924,7 +923,7 @@
  then
      $echo "\nnothing to do (no cover page, no data)." >&2
      cd $FAX_SPOOL_OUT
@@ -21,7 +22,7 @@
      exit 52
  fi
  
-@@ -965,7 +963,7 @@
+@@ -965,7 +964,7 @@
  # clean up
  rm $job.q
  cd ..