Update of /cvsroot/pure-data/pd/src In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv28532/pd/src
Modified Files: Tag: stable_0_40 m_pd.h s_inter.c Log Message: change seteuid to setuid to close security hole
Index: s_inter.c =================================================================== RCS file: /cvsroot/pure-data/pd/src/s_inter.c,v retrieving revision 1.18 retrieving revision 1.18.2.1 diff -C2 -d -r1.18 -r1.18.2.1 *** s_inter.c 15 Aug 2006 16:09:57 -0000 1.18 --- s_inter.c 18 Jul 2007 00:20:12 -0000 1.18.2.1 *************** *** 1021,1025 **** else if (!childpid) /* we're the child */ { ! seteuid(getuid()); /* lose setuid priveliges */ #ifndef __APPLE__ /* the wish process in Unix will make a wish shell and --- 1021,1025 ---- else if (!childpid) /* we're the child */ { ! setuid(getuid()); /* lose setuid priveliges */ #ifndef __APPLE__ /* the wish process in Unix will make a wish shell and *************** *** 1158,1162 **** if (pipe(pipe9) < 0) { ! seteuid(getuid()); /* lose setuid priveliges */ sys_sockerror("pipe"); return (1); --- 1158,1162 ---- if (pipe(pipe9) < 0) { ! setuid(getuid()); /* lose setuid priveliges */ sys_sockerror("pipe"); return (1); *************** *** 1165,1169 **** if (watchpid < 0) { ! seteuid(getuid()); /* lose setuid priveliges */ if (errno) perror("sys_startgui"); --- 1165,1169 ---- if (watchpid < 0) { ! setuid(getuid()); /* lose setuid priveliges */ if (errno) perror("sys_startgui"); *************** *** 1174,1178 **** { sys_set_priority(1); ! seteuid(getuid()); /* lose setuid priveliges */ if (pipe9[1] != 0) { --- 1174,1178 ---- { sys_set_priority(1); ! setuid(getuid()); /* lose setuid priveliges */ if (pipe9[1] != 0) { *************** *** 1191,1195 **** { sys_set_priority(0); ! seteuid(getuid()); /* lose setuid priveliges */ close(pipe9[0]); sys_watchfd = pipe9[1]; --- 1191,1195 ---- { sys_set_priority(0); ! setuid(getuid()); /* lose setuid priveliges */ close(pipe9[0]); sys_watchfd = pipe9[1]; *************** *** 1199,1203 **** }
! seteuid(getuid()); /* lose setuid priveliges */ #endif /* __linux__ */
--- 1199,1203 ---- }
! setuid(getuid()); /* lose setuid priveliges */ #endif /* __linux__ */
Index: m_pd.h =================================================================== RCS file: /cvsroot/pure-data/pd/src/m_pd.h,v retrieving revision 1.16.2.1 retrieving revision 1.16.2.2 diff -C2 -d -r1.16.2.1 -r1.16.2.2 *** m_pd.h 19 Jan 2007 04:30:57 -0000 1.16.2.1 --- m_pd.h 18 Jul 2007 00:20:12 -0000 1.16.2.2 *************** *** 11,15 **** #define PD_MAJOR_VERSION 0 #define PD_MINOR_VERSION 40 ! #define PD_BUGFIX_VERSION 2 #define PD_TEST_VERSION ""
--- 11,15 ---- #define PD_MAJOR_VERSION 0 #define PD_MINOR_VERSION 40 ! #define PD_BUGFIX_VERSION 3 #define PD_TEST_VERSION ""