ports/sysutils/cdrtools-devel/files/patch-libscg::scsiopen.c at ecbf66eb2d817a41b94dd0557bab97a6ff81caef - sync/ports - Archuserorg Forgejo: Archuser.org's Forgejo Server

sync/ports

mirror of https://git.freebsd.org/ports.git synced 2025-05-24 23:16:33 -04:00

Oliver Lehmann bc9ddf53fc Fix a securety issue which may cause a local root exploit

(if the cdrecord binary is suid 0).
For more information about this, feel free to take a look at
http://marc.theaimsgroup.com/?l=bugtraq&m=105285564307225&w=2

Approved by:	maintainer hasn't responded within 3 days, alex (mentor)

2003-05-20 20:33:44 +00:00

11 lines

330 B

C

Raw Blame History

 --- libscg/scsiopen.c.orig	Tue May 20 21:47:41 2003
 +++ libscg/scsiopen.c	Tue May 20 21:48:28 2003
@@ -270,7 +270,7 @@
  	}
  	if (scg__open(scgp, devname) <= 0) {
  		if (errs && scgp->errstr)
 -			js_snprintf(errs, slen, scgp->errstr);
 +			js_snprintf(errs, slen, "%s", scgp->errstr);
  		scg_sfree(scgp);
  		return ((SCSI *)0);
  	}