all messages for Guix-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
blob 7e5d2a3c9539540aba29f8b410530bd1b865b998 1315 bytes (raw)
name: gnu/packages/patches/ntfs-3g-CVE-2017-0358.patch 	 # note: path name is non-authoritative(*)
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42

 
Fix CVE-2017-0358:
http://seclists.org/oss-sec/2017/q1/259
This patch was copied from the above URL.

diff -ur ntfs-3g.old/src/lowntfs-3g.c ntfs-3g/src/lowntfs-3g.c
--- ntfs-3g.old/src/lowntfs-3g.c	2017-02-09 15:01:04.074331542 -0500
+++ ntfs-3g/src/lowntfs-3g.c	2017-02-09 15:06:35.757580937 -0500
@@ -3827,13 +3827,14 @@
 	struct stat st;
 	pid_t pid;
 	const char *cmd = "/sbin/modprobe";
+	char *env = (char*)NULL;
 	struct timespec req = { 0, 100000000 };   /* 100 msec */
 	fuse_fstype fstype;
         
 	if (!stat(cmd, &st) && !geteuid()) {
 		pid = fork();
 		if (!pid) {
-			execl(cmd, cmd, "fuse", NULL);
+			execle(cmd, cmd, "fuse", NULL, &env);
 			_exit(1);
 		} else if (pid != -1)
 			waitpid(pid, NULL, 0);
diff -ur ntfs-3g.old/src/ntfs-3g.c ntfs-3g/src/ntfs-3g.c
--- ntfs-3g.old/src/ntfs-3g.c	2017-02-09 15:01:04.074331542 -0500
+++ ntfs-3g/src/ntfs-3g.c	2017-02-09 15:06:26.077252571 -0500
@@ -3612,13 +3612,14 @@
	struct stat st;
	pid_t pid;
	const char *cmd = "/sbin/modprobe";
+	char *env = (char*)NULL;
	struct timespec req = { 0, 100000000 };   /* 100 msec */
	fuse_fstype fstype;
	
	if (!stat(cmd, &st) && !geteuid()) {
		pid = fork();
		if (!pid) {
-			execl(cmd, cmd, "fuse", NULL);
+			execle(cmd, cmd, "fuse", NULL, &env);
			_exit(1);
		} else if (pid != -1)
			waitpid(pid, NULL, 0);

debug log:

solving 7e5d2a3c9 ...
found 7e5d2a3c9 in https://yhetil.org/guix/87tw7rffba.fsf@openmailbox.org/
found 6edd676e3 in https://git.savannah.gnu.org/cgit/guix.git
preparing index
index prepared:
100644 6edd676e38c2ea5b81353eb96ed3638af7703b4e	gnu/packages/patches/ntfs-3g-CVE-2017-0358.patch

applying [1/1] https://yhetil.org/guix/87tw7rffba.fsf@openmailbox.org/
diff --git a/gnu/packages/patches/ntfs-3g-CVE-2017-0358.patch b/gnu/packages/patches/ntfs-3g-CVE-2017-0358.patch
index 6edd676e3..7e5d2a3c9 100644

1:12: space before tab in indent.
 	struct stat st;
1:13: space before tab in indent.
 	pid_t pid;
1:14: space before tab in indent.
 	const char *cmd = "/sbin/modprobe";
1:22: space before tab in indent.
 	struct timespec req = { 0, 100000000 };   /* 100 msec */
1:23: space before tab in indent.
 	fuse_fstype fstype;
Checking patch gnu/packages/patches/ntfs-3g-CVE-2017-0358.patch...
Applied patch gnu/packages/patches/ntfs-3g-CVE-2017-0358.patch cleanly.
warning: squelched 7 whitespace errors
warning: 12 lines add whitespace errors.

index at:
100644 7e5d2a3c9539540aba29f8b410530bd1b865b998	gnu/packages/patches/ntfs-3g-CVE-2017-0358.patch

(*) Git path names are given by the tree(s) the blob belongs to.
    Blobs themselves have no identifier aside from the hash of its contents.^
Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/guix.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.