[patch] /home/jaervosz/patch.CAN-2005-0099.abuse

patch.CAN-2005-0099.abuse (text/plain), 1.19 KB, created by Sune Kloppenborg Jeppesen (RETIRED) on 2005-01-28 07:15:04 UTC

--- abuse-2.00/imlib/specs.c	Tue Jul  8 11:00:50 1997
+++ abuse-2.00.new/imlib/specs.c	Wed Jan 26 10:10:14 2005
@@ -265,12 +265,25 @@
 
 void fast_load_start_recording(char *filename)
 {
+  // drop privileges prior to creating file.
+  uid_t euid;
+  gid_t egid;
+  euid = geteuid();
+  egid = getegid();
+
+  setuid(getuid());
+  setgid(getgid());
+
 #ifdef __POWERPC__
   fast_load_fd = ::open(macify_name(filename),O_BINARY|O_CREAT|O_RDWR);
 #else
   fast_load_fd = ::open(filename,O_CREAT|O_RDWR,S_IRWXU | S_IRWXG | S_IRWXO);
 #endif
+
 	fast_load_mode = 1;
+  setuid(euid);
+  setgid(egid);
+
 }
 
 void fast_load_stop_recording()
--- abuse-2.00/abuse/src/cache.c	Mon Apr 15 17:53:56 1996
+++ abuse-2.00.new/abuse/src/cache.c	Wed Jan 26 10:19:55 2005
@@ -672,6 +672,15 @@
   int flags=O_CREAT | O_RDWR;
 #endif
  
+  // drop privileges prior to creating file.
+  uid_t euid;
+  gid_t egid;
+  euid = geteuid();
+  egid = getegid();
+
+  setuid(getuid());
+  setgid(getgid());
+
   int cfail=1,num=0;
   do
   {
@@ -709,6 +718,8 @@
     exit_proc(cache_cleanup,cache_cleanup2);    // make sure this file gets deleted on exit..
   }
   lcache_number=-1;
+  setuid(euid);
+  setgid(egid);
 }
 
 cache_list::cache_list()