summaryrefslogtreecommitdiffstats
path: root/sysutils/cdrdao
diff options
context:
space:
mode:
authornetchild <netchild@FreeBSD.org>2003-05-21 15:19:38 +0000
committernetchild <netchild@FreeBSD.org>2003-05-21 15:19:38 +0000
commit0c80d81952e7da3390883abf08d53edb1b993f60 (patch)
treef4537d47c0f861aec094b385ee88e1a21443f1af /sysutils/cdrdao
parentba3d669442d5a81d544365052f87d3dce6d08b43 (diff)
downloadFreeBSD-ports-0c80d81952e7da3390883abf08d53edb1b993f60.zip
FreeBSD-ports-0c80d81952e7da3390883abf08d53edb1b993f60.tar.gz
Fix potential root exploit.
THE FREEBSD PORT IS NOT VULNERABLE AS IT DOES NOT SET THE SUID BIT, YOU ARE ONLY VULNERABLE, IF YOU SET IT ON YOUR OWN! Submitted by: maintainer
Diffstat (limited to 'sysutils/cdrdao')
-rw-r--r--sysutils/cdrdao/Makefile2
-rw-r--r--sysutils/cdrdao/files/patch-scsilib::libscg::scsiopen.c11
2 files changed, 12 insertions, 1 deletions
diff --git a/sysutils/cdrdao/Makefile b/sysutils/cdrdao/Makefile
index 0422600..46bc91f 100644
--- a/sysutils/cdrdao/Makefile
+++ b/sysutils/cdrdao/Makefile
@@ -7,7 +7,7 @@
PORTNAME= cdrdao
PORTVERSION= 1.1.7
-PORTREVISION= 2
+PORTREVISION= 3
CATEGORIES= sysutils audio
MASTER_SITES= ${MASTER_SITE_SOURCEFORGE}
MASTER_SITE_SUBDIR= ${PORTNAME}
diff --git a/sysutils/cdrdao/files/patch-scsilib::libscg::scsiopen.c b/sysutils/cdrdao/files/patch-scsilib::libscg::scsiopen.c
new file mode 100644
index 0000000..e39ebd0
--- /dev/null
+++ b/sysutils/cdrdao/files/patch-scsilib::libscg::scsiopen.c
@@ -0,0 +1,11 @@
+--- scsilib/libscg/scsiopen.c.orig Sun Nov 25 16:35:10 2001
++++ scsilib/libscg/scsiopen.c Tue May 20 23:01:01 2003
+@@ -239,7 +239,7 @@
+ }
+ if (scg__open(scgp, devname) <= 0) {
+ if (errs && scgp->errstr)
+- js_snprintf(errs, slen, scgp->errstr);
++ js_snprintf(errs, slen, "%s", scgp->errstr);
+ scg_sfree(scgp);
+ return ((SCSI *)0);
+ }
OpenPOWER on IntegriCloud