Update of /cvsroot/pure-data/pd/src In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv18438
Modified Files: Tag: branch-v0-39-2-extended m_pd.h s_inter.c Log Message: included setuid changes to address security concern raised by Matju. miller bumped the minor version on this
Index: s_inter.c =================================================================== RCS file: /cvsroot/pure-data/pd/src/s_inter.c,v retrieving revision 1.14.2.4 retrieving revision 1.14.2.5 diff -C2 -d -r1.14.2.4 -r1.14.2.5 *** s_inter.c 3 Jun 2007 00:51:49 -0000 1.14.2.4 --- s_inter.c 18 Jul 2007 14:05:55 -0000 1.14.2.5 *************** *** 1021,1025 **** else if (!childpid) /* we're the child */ { ! seteuid(getuid()); /* lose setuid priveliges */ #ifndef MACOSX /* the wish process in Unix will make a wish shell and --- 1021,1025 ---- else if (!childpid) /* we're the child */ { ! setuid(getuid()); /* lose setuid priveliges */ #ifndef MACOSX /* the wish process in Unix will make a wish shell and *************** *** 1158,1162 **** if (pipe(pipe9) < 0) { ! seteuid(getuid()); /* lose setuid priveliges */ sys_sockerror("pipe"); return (1); --- 1158,1162 ---- if (pipe(pipe9) < 0) { ! setuid(getuid()); /* lose setuid priveliges */ sys_sockerror("pipe"); return (1); *************** *** 1165,1169 **** if (watchpid < 0) { ! seteuid(getuid()); /* lose setuid priveliges */ if (errno) perror("sys_startgui"); --- 1165,1169 ---- if (watchpid < 0) { ! setuid(getuid()); /* lose setuid priveliges */ if (errno) perror("sys_startgui"); *************** *** 1174,1178 **** { sys_set_priority(1); ! seteuid(getuid()); /* lose setuid priveliges */ if (pipe9[1] != 0) { --- 1174,1178 ---- { sys_set_priority(1); ! setuid(getuid()); /* lose setuid priveliges */ if (pipe9[1] != 0) { *************** *** 1191,1195 **** { sys_set_priority(0); ! seteuid(getuid()); /* lose setuid priveliges */ close(pipe9[0]); sys_watchfd = pipe9[1]; --- 1191,1195 ---- { sys_set_priority(0); ! setuid(getuid()); /* lose setuid priveliges */ close(pipe9[0]); sys_watchfd = pipe9[1]; *************** *** 1199,1203 **** }
! seteuid(getuid()); /* lose setuid priveliges */ #endif /* __linux__ */
--- 1199,1203 ---- }
! setuid(getuid()); /* lose setuid priveliges */ #endif /* __linux__ */
Index: m_pd.h =================================================================== RCS file: /cvsroot/pure-data/pd/src/m_pd.h,v retrieving revision 1.8.2.9 retrieving revision 1.8.2.10 diff -C2 -d -r1.8.2.9 -r1.8.2.10 *** m_pd.h 10 Jul 2007 19:44:12 -0000 1.8.2.9 --- m_pd.h 18 Jul 2007 14:05:55 -0000 1.8.2.10 *************** *** 11,15 **** #define PD_MAJOR_VERSION 0 #define PD_MINOR_VERSION 39 ! #define PD_BUGFIX_VERSION 2 #define PD_TEST_VERSION "extended-rc5"
--- 11,15 ---- #define PD_MAJOR_VERSION 0 #define PD_MINOR_VERSION 39 ! #define PD_BUGFIX_VERSION 3 #define PD_TEST_VERSION "extended-rc5"