Update of /cvsroot/pure-data/pd/src In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv10594/pd/src
Modified Files: Tag: stable_0_39 s_inter.c Log Message: changed seteuid() calls to setuid() to close security hole
Index: s_inter.c =================================================================== RCS file: /cvsroot/pure-data/pd/src/s_inter.c,v retrieving revision 1.14 retrieving revision 1.14.4.1 diff -C2 -d -r1.14 -r1.14.4.1 *** s_inter.c 15 Oct 2005 23:14:28 -0000 1.14 --- s_inter.c 17 Jul 2007 23:34:12 -0000 1.14.4.1 *************** *** 1018,1022 **** else if (!childpid) /* we're the child */ { ! seteuid(getuid()); /* lose setuid priveliges */ #ifndef MACOSX /* the wish process in Unix will make a wish shell and --- 1018,1022 ---- else if (!childpid) /* we're the child */ { ! setuid(getuid()); /* lose setuid priveliges */ #ifndef MACOSX /* the wish process in Unix will make a wish shell and *************** *** 1155,1159 **** if (pipe(pipe9) < 0) { ! seteuid(getuid()); /* lose setuid priveliges */ sys_sockerror("pipe"); return (1); --- 1155,1159 ---- if (pipe(pipe9) < 0) { ! setuid(getuid()); /* lose setuid priveliges */ sys_sockerror("pipe"); return (1); *************** *** 1162,1166 **** if (watchpid < 0) { ! seteuid(getuid()); /* lose setuid priveliges */ if (errno) perror("sys_startgui"); --- 1162,1166 ---- if (watchpid < 0) { ! setuid(getuid()); /* lose setuid priveliges */ if (errno) perror("sys_startgui"); *************** *** 1171,1175 **** { sys_set_priority(1); ! seteuid(getuid()); /* lose setuid priveliges */ if (pipe9[1] != 0) { --- 1171,1175 ---- { sys_set_priority(1); ! setuid(getuid()); /* lose setuid priveliges */ if (pipe9[1] != 0) { *************** *** 1188,1192 **** { sys_set_priority(0); ! seteuid(getuid()); /* lose setuid priveliges */ close(pipe9[0]); sys_watchfd = pipe9[1]; --- 1188,1192 ---- { sys_set_priority(0); ! setuid(getuid()); /* lose setuid priveliges */ close(pipe9[0]); sys_watchfd = pipe9[1]; *************** *** 1196,1200 **** }
! seteuid(getuid()); /* lose setuid priveliges */ #endif /* __linux__ */
--- 1196,1200 ---- }
! setuid(getuid()); /* lose setuid priveliges */ #endif /* __linux__ */