From owner-freebsd-bugs  Sat Mar  4  2:10: 8 2000
Delivered-To: freebsd-bugs@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
	by hub.freebsd.org (Postfix) with ESMTP id 8AB9837B7AC
	for <freebsd-bugs@FreeBSD.org>; Sat,  4 Mar 2000 02:10:03 -0800 (PST)
	(envelope-from gnats@FreeBSD.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.9.3/8.9.2) id CAA18744;
	Sat, 4 Mar 2000 02:10:03 -0800 (PST)
	(envelope-from gnats@FreeBSD.org)
Date: Sat, 4 Mar 2000 02:10:03 -0800 (PST)
Message-Id: <200003041010.CAA18744@freefall.freebsd.org>
To: freebsd-bugs@FreeBSD.org
Cc: 
From: Phil Homewood <phil@rivendell.apana.org.au>
Subject: Re: gnu/17175: [PATCH] send-pr predictable tempfile vulnerability
Reply-To: Phil Homewood <phil@rivendell.apana.org.au>
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

The following reply was made to PR gnu/17175; it has been noted by GNATS.

From: Phil Homewood <phil@rivendell.apana.org.au>
To: freebsd-gnats-submit@FreeBSD.org
Cc:  
Subject: Re: gnu/17175: [PATCH] send-pr predictable tempfile vulnerability
Date: Sat, 4 Mar 2000 20:07:01 +1000

 OOPS. Previous patch is mildly bogus. This one works better.
 
 --- src/gnu/usr.bin/send-pr/send-pr.sh.orig     Sat Sep  4 06:06:55 1999
 +++ src/gnu/usr.bin/send-pr/send-pr.sh  Sat Mar  4 20:01:14 2000
 @@ -75,9 +75,9 @@
  
  [ -z "$TMPDIR" ] && TMPDIR=/tmp
  
 -TEMP=$TMPDIR/p$$
 -BAD=$TMPDIR/pbad$$
 -REF=$TMPDIR/pf$$
 +TEMP=`mktemp -t send-pr.p` || exit 1
 +BAD=`mktemp -t send-pr.pbad` || exit 1
 +REF=`mktemp -t send-pr.pf` || exit 1
  
  if [ -z "$LOGNAME" -a -n "$USER" ]; then
    LOGNAME=$USER
 
 -- 
 Phil Homewood        dot@atat.dotat.org        phil@rivendell.apana.org.au
            Member, Australian Public Access Network Association
 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message