diff options
| author | Matthieu Herrb <matthieu.herrb@laas.fr> | 2011-10-17 22:27:35 +0200 |
|---|---|---|
| committer | Julien Cristau <jcristau@debian.org> | 2011-10-21 20:43:22 +0200 |
| commit | 03ff880e8bf20cdecaf27f03391ea31545ecc22c (patch) | |
| tree | 702a4faa3b5cf7cd362b7a7a5276225439d6578c /hw/kdrive/via/via.c | |
| parent | 3394ae378da567025ac94a2c2ff04f2a0b113962 (diff) | |
Fix CVE-2011-4029: File permission change vulnerability.server-1.7-branch
Use fchmod() to change permissions of the lock file instead
of chmod(), thus avoid the race that can be exploited to set
a symbolic link to any file or directory in the system.
Signed-off-by: Matthieu Herrb <matthieu.herrb@laas.fr>
Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
(cherry picked from commit b67581cf825940fdf52bf2e0af4330e695d724a4)
(cherry picked from commit 12f65819ffb04103f170ecd7e281348de618fc4c)
Diffstat (limited to 'hw/kdrive/via/via.c')
0 files changed, 0 insertions, 0 deletions