blob: 7287cef80b30dc19fd92aa63ca7cdb557e41a4c3 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
|
$NetBSD: patch-screen.c,v 1.2 2017/01/25 00:18:02 maya Exp $
Use standard headers.
Don't open user-supplied paths as root.
--- screen.c.orig 2017-01-17 19:28:29.000000000 +0000
+++ screen.c
@@ -88,6 +88,8 @@
# include <langinfo.h>
#endif
+#include <limits.h>
+
#include "screen.h"
#ifdef HAVE_BRAILLE
# include "braille.h"
@@ -674,11 +676,15 @@ int main(int ac, char** av)
if (strlen(screenlogfile) > PATH_MAX)
Panic(0, "-L: logfile name too long. (max. %d char)", PATH_MAX);
+ if (seteuid(getuid()) < 0)
+ Panic(0, "setuid 1");
FILE *w_check;
if ((w_check = fopen(screenlogfile, "w")) == NULL)
Panic(0, "-L: logfile name access problem");
else
fclose(w_check);
+ if (seteuid(0) < 0)
+ Panic(0, "setuid 2");
}
nwin_options.Lflag = 1;
break;
|
