From f229df5310a46d7f8eb664663769f4124d30c4ab Mon Sep 17 00:00:00 2001 From: cvs2git Date: Tue, 12 Nov 2002 14:27:46 +0000 Subject: [PATCH] This commit was manufactured by cvs2git to create tag 'RA-1_0'. Sprout from master 2002-11-12 14:27:46 UTC undefine '- release 31 to rebuild with fixed htmlview(fixed path to more)' Cherrypick from master 2002-07-31 10:11:31 UTC Jakub Bogusz '- security fixes (insecure temp files creation)': mm-tmpfile.patch -> 1.1 --- mm-tmpfile.patch | 37 +++++++++++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 mm-tmpfile.patch diff --git a/mm-tmpfile.patch b/mm-tmpfile.patch new file mode 100644 index 0000000..184aff3 --- /dev/null +++ b/mm-tmpfile.patch @@ -0,0 +1,37 @@ +diff -ruN mm-1.1.3.orig/mm_core.c mm-1.1.3/mm_core.c +--- mm-1.1.3.orig/mm_core.c Tue Jun 20 08:55:44 2000 ++++ mm-1.1.3/mm_core.c Wed Jul 24 18:22:39 2002 +@@ -249,7 +249,7 @@ + + #if defined(MM_SHMT_MMPOSX) + shm_unlink(fnmem); /* Ok when it fails */ +- if ((fdmem = shm_open(fnmem, O_RDWR|O_CREAT, MM_CORE_FILEMODE)) == -1) ++ if ((fdmem = shm_open(fnmem, O_RDWR|O_CREAT|O_EXCL, MM_CORE_FILEMODE)) == -1) + FAIL(MM_ERR_CORE|MM_ERR_SYSTEM, "failed to open tempfile"); + if (ftruncate(fdmem, mm_core_mapoffset+size) == -1) + FAIL(MM_ERR_CORE|MM_ERR_SYSTEM, "failed to truncate tempfile"); +@@ -275,7 +275,7 @@ + + #if defined(MM_SHMT_MMFILE) + unlink(fnmem); +- if ((fdmem = open(fnmem, O_RDWR|O_CREAT, MM_CORE_FILEMODE)) == -1) ++ if ((fdmem = open(fnmem, O_RDWR|O_CREAT|O_EXCL, MM_CORE_FILEMODE)) == -1) + FAIL(MM_ERR_CORE|MM_ERR_SYSTEM, "failed to open memory file"); + if (ftruncate(fdmem, mm_core_mapoffset+size) == -1) + FAIL(MM_ERR_CORE|MM_ERR_SYSTEM, "failed to truncate memory file"); +@@ -303,13 +303,13 @@ + + #if defined(MM_SEMT_FLOCK) + unlink(fnsem); +- if ((fdsem = open(fnsem, O_RDWR|O_CREAT, MM_CORE_FILEMODE)) == -1) ++ if ((fdsem = open(fnsem, O_RDWR|O_CREAT|O_EXCL, MM_CORE_FILEMODE)) == -1) + FAIL(MM_ERR_CORE|MM_ERR_SYSTEM, "failed to open semaphore file"); + #endif /* MM_SEMT_FLOCK */ + + #if defined(MM_SEMT_FCNTL) + unlink(fnsem); +- if ((fdsem = open(fnsem, O_RDWR|O_CREAT, MM_CORE_FILEMODE)) == -1) ++ if ((fdsem = open(fnsem, O_RDWR|O_CREAT|O_EXCL, MM_CORE_FILEMODE)) == -1) + FAIL(MM_ERR_CORE|MM_ERR_SYSTEM, "failed to open semaphore file"); + #endif /* MM_SEMT_FCNTL */ + -- 2.44.0