Go to:
Gentoo Home
Documentation
Forums
Lists
Bugs
Planet
Store
Wiki
Get Gentoo!
Gentoo's Bugzilla – Attachment 135319 Details for
Bug 198231
dev-tex/feynmf < 1.08-r2 Insecure temporary file creation (CVE-2007-5940)
Home
|
New
–
[Ex]
|
Browse
|
Search
|
Privacy Policy
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
feynmf-1.08-tempfile.patch
feynmf-1.08-tempfile.patch (text/plain), 1.11 KB, created by
Ulrich Müller
on 2007-11-06 09:18:30 UTC
(
hide
)
Description:
feynmf-1.08-tempfile.patch
Filename:
MIME Type:
Creator:
Ulrich Müller
Created:
2007-11-06 09:18:30 UTC
Size:
1.11 KB
patch
obsolete
>--- feynmf-orig/feynmf.pl 2007-11-06 08:32:37.000000000 +0100 >+++ feynmf/feynmf.pl 2007-11-06 09:33:04.000000000 +0100 >@@ -119,6 +119,7 @@ > require 5.000; > # use strict; > use File::Find; >+use File::Temp qw(tempfile); > use Getopt::Long; > > ######################################################################## >@@ -270,18 +271,18 @@ > my @tfm = @_; > # Prepare a fake temporary PL file > # (/dev/null won't do, because the font must not be empty): >- my ($pl) = "/tmp/feynmf$$.pl"; > my ($tfm); > $pltotf_prog > or die "feynmf: fatal: pltopf programm required unless -notfm\n"; >- open (PL, ">$pl") or die "feynmf: can't open temporary file $pl: $!\n"; >+ my ($PL, $pl) = tempfile("/tmp/feynmfXXXXXX", SUFFIX => ".pl"); >+ $PL or die "feynmf: can't open temporary file: $!\n"; > push @temporay_files, $pl; >- print PL <<__END_PL__; >+ print $PL <<__END_PL__; > (FAMILY FEYNMF) > (DESIGNSIZE R 10.0) > (CHARACTER D 1 (CHARWD R 10.0) (CHARHT R 10.0)) > __END_PL__ >- close (PL); >+ close ($PL); > foreach $tfm (@tfm) { > maybe_run "$pltotf_prog $pl $tfm.tfm" unless -r "$tfm.tfm"; > }
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 198231
:
135305
| 135319