Update of /cvsroot/pure-data/pd/src In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv7983
Modified Files: Tag: devel_0_39 s_inter.c Log Message: security fix for setuid.
Index: s_inter.c =================================================================== RCS file: /cvsroot/pure-data/pd/src/s_inter.c,v retrieving revision 1.5.4.10.2.21 retrieving revision 1.5.4.10.2.22 diff -C2 -d -r1.5.4.10.2.21 -r1.5.4.10.2.22 *** s_inter.c 19 Nov 2006 08:02:55 -0000 1.5.4.10.2.21 --- s_inter.c 23 Nov 2006 19:32:05 -0000 1.5.4.10.2.22 *************** *** 1074,1078 **** else if (!childpid) /* we're the child */ { ! seteuid(getuid()); /* lose setuid priveliges */ #ifndef __APPLE__ /* the wish process in Unix will make a wish shell and --- 1074,1078 ---- else if (!childpid) /* we're the child */ { ! setuid(getuid()); /* lose setuid priveliges */ #ifndef __APPLE__ /* the wish process in Unix will make a wish shell and *************** *** 1250,1254 **** if (pipe(pipe9) < 0) { ! seteuid(getuid()); /* lose setuid priveliges */ sys_sockerror("pipe"); return (1); --- 1250,1254 ---- if (pipe(pipe9) < 0) { ! setuid(getuid()); /* lose setuid priveliges */ sys_sockerror("pipe"); return (1); *************** *** 1257,1261 **** if (watchpid < 0) { ! seteuid(getuid()); /* lose setuid priveliges */ if (errno) perror("sys_startgui"); --- 1257,1261 ---- if (watchpid < 0) { ! setuid(getuid()); /* lose setuid priveliges */ if (errno) perror("sys_startgui"); *************** *** 1266,1270 **** { sys_set_priority(1); ! seteuid(getuid()); /* lose setuid priveliges */ if (pipe9[1] != 0) { --- 1266,1270 ---- { sys_set_priority(1); ! setuid(getuid()); /* lose setuid priveliges */ if (pipe9[1] != 0) { *************** *** 1283,1287 **** { sys_set_priority(0); ! seteuid(getuid()); /* lose setuid priveliges */ close(pipe9[0]); sys_watchfd = pipe9[1]; --- 1283,1287 ---- { sys_set_priority(0); ! setuid(getuid()); /* lose setuid priveliges */ close(pipe9[0]); sys_watchfd = pipe9[1]; *************** *** 1295,1299 **** }
! seteuid(getuid()); /* lose setuid priveliges */ #endif /* __linux__ */
--- 1295,1299 ---- }
! setuid(getuid()); /* lose setuid priveliges */ #endif /* __linux__ */