Date: Wed, 16 May 2018 13:20:11 +0000 From: bugzilla-noreply@freebsd.org To: ports-bugs@FreeBSD.org Subject: [Bug 228291] [patch] security/plasma5-kwallet-pam: make it work Message-ID: <bug-228291-7788@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D228291 Bug ID: 228291 Summary: [patch] security/plasma5-kwallet-pam: make it work Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: Individual Port(s) Assignee: kde@FreeBSD.org Reporter: tijl@FreeBSD.org Assignee: kde@FreeBSD.org Flags: maintainer-feedback?(kde@FreeBSD.org) Created attachment 193457 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D193457&action= =3Dedit patch - Remove USES=3Dgettext and add USE_KDE=3Dwallet_run. - Patch the code so kwalletd can be found in LOCALBASE. - Replace the use of socat with netcat which is in base. Note that netcat = is bidirectional. It sends input from stdin over the socket and input from the socket to stdout. After receiving EOF on stdin it keeps polling the socket= for input until the other end closes the connection, which in the case of kwall= etd never happens because it's also waiting for more data until the other end closes the connection. Call netcat using "nc | :" so its stdout is a pipe = of which the far end closes immediately (stdout itself stays open). Without a valid stdout netcat becomes unidirectional. Using "nc >&-" doesn't work because it closes stdout itself and its descriptor will be reused for the socket so netcat thinks it has a valid stdout. - Add an upstream followup to the CVE patches committed in ports r469032. - Fix an off-by-one buffer size check. - Fix a call to bind(2). The third argument should be the size of the sock= addr struct. It contains an extra field besides sun_path and sun_family in BSD = so the name of the socket got truncated. --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-228291-7788>