FreeBSD Bugzilla – Attachment 602 Details for
Bug 2582
security hole in lib/libc/nls/msgcat.c
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
file.diff
file.diff (text/plain), 662 bytes, created by
Julian Assange
on 1997-01-25 16:50:01 UTC
(
hide
)
Description:
file.diff
Filename:
MIME Type:
Creator:
Julian Assange
Created:
1997-01-25 16:50:01 UTC
Size:
662 bytes
patch
obsolete
>--- src/lib/libc/nls/msgcat.c.orig Sun Jan 26 03:15:25 1997 >+++ src/lib/libc/nls/msgcat.c Sun Jan 26 03:19:52 1997 >@@ -99,8 +99,8 @@ > catpath = name; > if (stat(catpath, &sbuf)) return(0); > } else { >- if ((lang = (char *) getenv("LANG")) == NULL) lang = "C"; >- if ((nlspath = (char *) getenv("NLSPATH")) == NULL) { >+ if ((lang = (char *) getenv("LANG")) == NULL || getuid() != geteuid() || getgid() != getegid()) lang = "C"; >+ if ((nlspath = (char *) getenv("NLSPATH")) == NULL || getuid() != geteuid() || getgid() != getegid()) { > nlspath = "/usr/share/nls/%L/%N.cat:/usr/share/nls/%N/%L:/usr/local/share/nls/%L/%N.cat:/usr/local/share/nls/%N/%L"; > }
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=602">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 2582
: 602