blob: c07cd67be8e4f018835c91b1088b1c8f5cde25e5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
$NetBSD: patch-az,v 1.4 2008/11/15 01:19:08 dmcmahill Exp $
Address tmp file vulnerability at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4983
--- util/scidoc.orig 2006-01-04 14:40:34.000000000 +0000
+++ util/scidoc
@@ -6,25 +6,40 @@
echo ------------------- File $2--------------------
SCI=$1
export SCI
+tmpd=/tmp/scidem.$$
+mkdir -m 0700 $tmpd
+rc=$?
+if test $rc -ne 0 ; then
+ cat << EOF
+
+ERROR: $0 failed to create the directory
+ $tmpd
+ securily. It either already exists or you do not have sufficient permissions
+
+EOF
+ exit 1
+fi
+
+
if [ -f $3 ]; then rm $3;fi;
-trap "rm -f /tmp/$2.$$ /tmp/$2.$$.res /tmp/$2.$$.err /tmp/$2.$$.diff\
+trap "rm -f ${tmpd}$2.$$ ${tmpd}$2.$$.res ${tmpd}$2.$$.err ${tmpd}$2.$$.diff\
;exit 1" 1 2 13 15
echo "clear;lines(0);deff('[]=bugmes()','write(%io(2),''error on test'')');\
- diary('$3');driver('Pos');" >> /tmp/$2.$$ ;
+ diary('$3');driver('Pos');" >> ${tmpd}$2.$$ ;
sed -e "s/pause,end/bugmes();quit;end/" \
-e "s/halt()//" \
- $2 >> /tmp/$2.$$ ;
-echo "diary(0);xend();quit;quit;quit;quit;quit;quit;" >> /tmp/$2.$$ ;
-($SCI/bin/scilex -nw < /tmp/$2.$$ > /tmp/$2.$$.res ) 2> /tmp/$2.$$.err ;
+ $2 >> ${tmpd}$2.$$ ;
+echo "diary(0);xend();quit;quit;quit;quit;quit;quit;" >> ${tmpd}$2.$$ ;
+($SCI/bin/scilex -nw < ${tmpd}$2.$$ > ${tmpd}$2.$$.res ) 2> ${tmpd}$2.$$.err ;
sed -e "s/ \.[0-9]/0&/g" -e "s/0 \./0./g" -e "s/E+/D+/g" -e "s/E-/D-/g" -e "s/-\./-0\./g" $3 > $3.n
grep -v "xinit(" $3.n | grep -v "diary(" | grep -v "exec(" > $3
rm -f $3.n
-if ( grep error /tmp/$2.$$.res > /dev/null ) ; then
+if ( grep error ${tmpd}$2.$$.res > /dev/null ) ; then
if [ $# != 4 ]; then
echo "ERROR DETECTED while executing $2" ;
fi;
fi;
echo ----------------------------------------------------------
-rm -f /tmp/$2.$$ /tmp/$2.$$.res /tmp/$2.$$.err /tmp/$2.$$.diff
+rm -fr ${tmpd}
exit 0
|
