54 lines
1.9 KiB
Text
54 lines
1.9 KiB
Text
$NetBSD: patch-az,v 1.4 2008/11/15 01:19:08 dmcmahill Exp $
|
|
|
|
Address tmp file vulnerability at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4983
|
|
|
|
--- util/scidoc.orig 2006-01-04 14:40:34.000000000 +0000
|
|
+++ util/scidoc
|
|
@@ -6,25 +6,40 @@
|
|
echo ------------------- File $2--------------------
|
|
SCI=$1
|
|
export SCI
|
|
+tmpd=/tmp/scidem.$$
|
|
+mkdir -m 0700 $tmpd
|
|
+rc=$?
|
|
+if test $rc -ne 0 ; then
|
|
+ cat << EOF
|
|
+
|
|
+ERROR: $0 failed to create the directory
|
|
+ $tmpd
|
|
+ securily. It either already exists or you do not have sufficient permissions
|
|
+
|
|
+EOF
|
|
+ exit 1
|
|
+fi
|
|
+
|
|
+
|
|
if [ -f $3 ]; then rm $3;fi;
|
|
-trap "rm -f /tmp/$2.$$ /tmp/$2.$$.res /tmp/$2.$$.err /tmp/$2.$$.diff\
|
|
+trap "rm -f ${tmpd}$2.$$ ${tmpd}$2.$$.res ${tmpd}$2.$$.err ${tmpd}$2.$$.diff\
|
|
;exit 1" 1 2 13 15
|
|
echo "clear;lines(0);deff('[]=bugmes()','write(%io(2),''error on test'')');\
|
|
- diary('$3');driver('Pos');" >> /tmp/$2.$$ ;
|
|
+ diary('$3');driver('Pos');" >> ${tmpd}$2.$$ ;
|
|
sed -e "s/pause,end/bugmes();quit;end/" \
|
|
-e "s/halt()//" \
|
|
- $2 >> /tmp/$2.$$ ;
|
|
-echo "diary(0);xend();quit;quit;quit;quit;quit;quit;" >> /tmp/$2.$$ ;
|
|
-($SCI/bin/scilex -nw < /tmp/$2.$$ > /tmp/$2.$$.res ) 2> /tmp/$2.$$.err ;
|
|
+ $2 >> ${tmpd}$2.$$ ;
|
|
+echo "diary(0);xend();quit;quit;quit;quit;quit;quit;" >> ${tmpd}$2.$$ ;
|
|
+($SCI/bin/scilex -nw < ${tmpd}$2.$$ > ${tmpd}$2.$$.res ) 2> ${tmpd}$2.$$.err ;
|
|
sed -e "s/ \.[0-9]/0&/g" -e "s/0 \./0./g" -e "s/E+/D+/g" -e "s/E-/D-/g" -e "s/-\./-0\./g" $3 > $3.n
|
|
grep -v "xinit(" $3.n | grep -v "diary(" | grep -v "exec(" > $3
|
|
rm -f $3.n
|
|
-if ( grep error /tmp/$2.$$.res > /dev/null ) ; then
|
|
+if ( grep error ${tmpd}$2.$$.res > /dev/null ) ; then
|
|
if [ $# != 4 ]; then
|
|
echo "ERROR DETECTED while executing $2" ;
|
|
fi;
|
|
fi;
|
|
echo ----------------------------------------------------------
|
|
-rm -f /tmp/$2.$$ /tmp/$2.$$.res /tmp/$2.$$.err /tmp/$2.$$.diff
|
|
+rm -fr ${tmpd}
|
|
exit 0
|
|
|