From a01ac766fb8800e4344fdd16144cfbb53e6ea8b2 Mon Sep 17 00:00:00 2001 From: Foxfair Hu Date: Wed, 21 May 2003 15:40:40 +0000 Subject: [PATCH] PR: 52098 Submitted by: Jim Geovedi close temp file privledge problem in security/fuzz. --- security/fuzz/Makefile | 1 + security/fuzz/files/patch-fuzz.c | 20 ++++++++++++++++++++ 2 files changed, 21 insertions(+) create mode 100644 security/fuzz/files/patch-fuzz.c diff --git a/security/fuzz/Makefile b/security/fuzz/Makefile index f5f479c746ce..c934ac0c32c8 100644 --- a/security/fuzz/Makefile +++ b/security/fuzz/Makefile @@ -7,6 +7,7 @@ PORTNAME= fuzz PORTVERSION= 0.6 +PORTREVISION= 1 CATEGORIES= security MASTER_SITES= ${MASTER_SITE_SOURCEFORGE} MASTER_SITE_SUBDIR= fuzz diff --git a/security/fuzz/files/patch-fuzz.c b/security/fuzz/files/patch-fuzz.c new file mode 100644 index 000000000000..ba229134bd9d --- /dev/null +++ b/security/fuzz/files/patch-fuzz.c @@ -0,0 +1,20 @@ +--- fuzz.c.orig Mon May 12 01:49:39 2003 ++++ fuzz.c Mon May 12 01:53:44 2003 +@@ -387,10 +387,16 @@ + int progpipe[2],status; + char sendnewline=0; + unsigned long curchar=0,linelen=0; ++ int fd; + + // finish setting up files + if(!execute_filename){ +- snprintf(outfilename,MAXPATH,"/tmp%s.%lu",strrchr(progname,'/'),runs); ++ snprintf(outfilename,MAXPATH,"/tmp%s.%lu.XXXXXX",strrchr(progname,'/'),runs); ++ if ((fd=mkstemp(outfilename)) < 0) { ++ perror("Unable to create temporary file"); ++ abort(); ++ } ++ close(fd); + if((outfile=fopen(outfilename,"w"))==NULL){ + fprintf(stderr,"Can't fopen outfile.\n"); + abort();