Go to:
Gentoo Home
Documentation
Forums
Lists
Bugs
Planet
Store
Wiki
Get Gentoo!
Gentoo's Bugzilla – Attachment 105965 Details for
Bug 160130
sci-astronomy/predict: Insecure /tmp file usage in files/predict-update
Home
|
New
–
[Ex]
|
Browse
|
Search
|
Privacy Policy
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
proposed patch to remove insecure file handling
predict-update.patch (text/plain), 1.14 KB, created by
Markus Dittrich (RETIRED)
on 2007-01-07 23:49:44 UTC
(
hide
)
Description:
proposed patch to remove insecure file handling
Filename:
MIME Type:
Creator:
Markus Dittrich (RETIRED)
Created:
2007-01-07 23:49:44 UTC
Size:
1.14 KB
patch
obsolete
>--- predict-update.old 2007-01-07 18:42:19.000000000 -0500 >+++ predict-update 2007-01-07 18:39:26.000000000 -0500 >@@ -1,8 +1,7 @@ > #!/bin/sh >-PV= >+oldpwd=$PWD > > if [ ! -f ~/.predict/predict.tle ]; then >- oldpwd=$PWD > mkdir -p ~/.predict > cd ~/.predict > cat > predict.tle << EOF >@@ -79,10 +78,15 @@ > 1 26929U 02216.67548843 .00042169 00000-0 00000-0 0 9 > 2 26929 67.0426 246.5544 0011326 237.9129 122.0981 15.57367567 47636 > EOF >- cd $oldpwd > fi >-wget -qc www.celestrak.com/NORAD/elements/amateur.txt -O /tmp/amateur.txt >-wget -qc www.celestrak.com/NORAD/elements/visual.txt -O /tmp/visual.txt >-wget -qc www.celestrak.com/NORAD/elements/weather.txt -O /tmp/weather.txt >-predict -u /tmp/amateur.txt /tmp/visual.txt /tmp/weather.txt >-rm /tmp/amateur.txt /tmp/visual.txt /tmp/weather.txt >+ >+mkdir /tmp/predict-$$ || exit 1 >+cd /tmp/predict-$$ >+ >+wget -qc www.celestrak.com/NORAD/elements/amateur.txt -O ./amateur.txt >+wget -qc www.celestrak.com/NORAD/elements/visual.txt -O ./visual.txt >+wget -qc www.celestrak.com/NORAD/elements/weather.txt -O ./weather.txt >+predict -u ./amateur.txt ./visual.txt ./weather.txt >+ >+cd ${oldpwd} >+rm -fr /tmp/predict-$$
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 160130
: 105965