head 1.4; access; symbols pkgsrc-2020Q4:1.3.0.88 pkgsrc-2020Q4-base:1.3 pkgsrc-2020Q3:1.3.0.86 pkgsrc-2020Q3-base:1.3 pkgsrc-2020Q2:1.3.0.82 pkgsrc-2020Q2-base:1.3 pkgsrc-2020Q1:1.3.0.62 pkgsrc-2020Q1-base:1.3 pkgsrc-2019Q4:1.3.0.84 pkgsrc-2019Q4-base:1.3 pkgsrc-2019Q3:1.3.0.80 pkgsrc-2019Q3-base:1.3 pkgsrc-2019Q2:1.3.0.78 pkgsrc-2019Q2-base:1.3 pkgsrc-2019Q1:1.3.0.76 pkgsrc-2019Q1-base:1.3 pkgsrc-2018Q4:1.3.0.74 pkgsrc-2018Q4-base:1.3 pkgsrc-2018Q3:1.3.0.72 pkgsrc-2018Q3-base:1.3 pkgsrc-2018Q2:1.3.0.70 pkgsrc-2018Q2-base:1.3 pkgsrc-2018Q1:1.3.0.68 pkgsrc-2018Q1-base:1.3 pkgsrc-2017Q4:1.3.0.66 pkgsrc-2017Q4-base:1.3 pkgsrc-2017Q3:1.3.0.64 pkgsrc-2017Q3-base:1.3 pkgsrc-2017Q2:1.3.0.60 pkgsrc-2017Q2-base:1.3 pkgsrc-2017Q1:1.3.0.58 pkgsrc-2017Q1-base:1.3 pkgsrc-2016Q4:1.3.0.56 pkgsrc-2016Q4-base:1.3 pkgsrc-2016Q3:1.3.0.54 pkgsrc-2016Q3-base:1.3 pkgsrc-2016Q2:1.3.0.52 pkgsrc-2016Q2-base:1.3 pkgsrc-2016Q1:1.3.0.50 pkgsrc-2016Q1-base:1.3 pkgsrc-2015Q4:1.3.0.48 pkgsrc-2015Q4-base:1.3 pkgsrc-2015Q3:1.3.0.46 pkgsrc-2015Q3-base:1.3 pkgsrc-2015Q2:1.3.0.44 pkgsrc-2015Q2-base:1.3 pkgsrc-2015Q1:1.3.0.42 pkgsrc-2015Q1-base:1.3 pkgsrc-2014Q4:1.3.0.40 pkgsrc-2014Q4-base:1.3 pkgsrc-2014Q3:1.3.0.38 pkgsrc-2014Q3-base:1.3 pkgsrc-2014Q2:1.3.0.36 pkgsrc-2014Q2-base:1.3 pkgsrc-2014Q1:1.3.0.34 pkgsrc-2014Q1-base:1.3 pkgsrc-2013Q4:1.3.0.32 pkgsrc-2013Q4-base:1.3 pkgsrc-2013Q3:1.3.0.30 pkgsrc-2013Q3-base:1.3 pkgsrc-2013Q2:1.3.0.28 pkgsrc-2013Q2-base:1.3 pkgsrc-2013Q1:1.3.0.26 pkgsrc-2013Q1-base:1.3 pkgsrc-2012Q4:1.3.0.24 pkgsrc-2012Q4-base:1.3 pkgsrc-2012Q3:1.3.0.22 pkgsrc-2012Q3-base:1.3 pkgsrc-2012Q2:1.3.0.20 pkgsrc-2012Q2-base:1.3 pkgsrc-2012Q1:1.3.0.18 pkgsrc-2012Q1-base:1.3 pkgsrc-2011Q4:1.3.0.16 pkgsrc-2011Q4-base:1.3 pkgsrc-2011Q3:1.3.0.14 pkgsrc-2011Q3-base:1.3 pkgsrc-2011Q2:1.3.0.12 pkgsrc-2011Q2-base:1.3 pkgsrc-2011Q1:1.3.0.10 pkgsrc-2011Q1-base:1.3 pkgsrc-2010Q4:1.3.0.8 pkgsrc-2010Q4-base:1.3 pkgsrc-2010Q3:1.3.0.6 pkgsrc-2010Q3-base:1.3 pkgsrc-2010Q2:1.3.0.4 pkgsrc-2010Q2-base:1.3 pkgsrc-2010Q1:1.3.0.2 pkgsrc-2010Q1-base:1.3 pkgsrc-2009Q4:1.2.0.44 pkgsrc-2009Q4-base:1.2 pkgsrc-2008Q4:1.2.0.42 pkgsrc-2008Q4-base:1.2 pkgsrc-2008Q3:1.2.0.40 pkgsrc-2008Q3-base:1.2 cube-native-xorg:1.2.0.38 cube-native-xorg-base:1.2 pkgsrc-2008Q2:1.2.0.36 pkgsrc-2008Q2-base:1.2 pkgsrc-2008Q1:1.2.0.34 pkgsrc-2008Q1-base:1.2 pkgsrc-2007Q4:1.2.0.32 pkgsrc-2007Q4-base:1.2 pkgsrc-2007Q3:1.2.0.30 pkgsrc-2007Q3-base:1.2 pkgsrc-2007Q2:1.2.0.28 pkgsrc-2007Q2-base:1.2 pkgsrc-2007Q1:1.2.0.26 pkgsrc-2007Q1-base:1.2 pkgsrc-2006Q4:1.2.0.24 pkgsrc-2006Q4-base:1.2 pkgsrc-2006Q3:1.2.0.22 pkgsrc-2006Q3-base:1.2 pkgsrc-2006Q2:1.2.0.20 pkgsrc-2006Q2-base:1.2 pkgsrc-2006Q1:1.2.0.18 pkgsrc-2006Q1-base:1.2 pkgsrc-2005Q4:1.2.0.16 pkgsrc-2005Q4-base:1.2 pkgsrc-2005Q3:1.2.0.14 pkgsrc-2005Q3-base:1.2 pkgsrc-2005Q2:1.2.0.12 pkgsrc-2005Q2-base:1.2 pkgsrc-2005Q1:1.2.0.10 pkgsrc-2005Q1-base:1.2 pkgsrc-2004Q4:1.2.0.8 pkgsrc-2004Q4-base:1.2 pkgsrc-2004Q3:1.2.0.6 pkgsrc-2004Q3-base:1.2 pkgsrc-2004Q2:1.2.0.4 pkgsrc-2004Q2-base:1.2 pkgsrc-2004Q1:1.2.0.2 pkgsrc-2004Q1-base:1.2 pkgsrc-2003Q4:1.1.0.2 pkgsrc-2003Q4-base:1.1; locks; strict; comment @# @; 1.4 date 2021.02.16.09.42.06; author kim; state dead; branches; next 1.3; commitid vHRn4XSGLs8IXUHC; 1.3 date 2010.02.15.17.06.18; author joerg; state Exp; branches; next 1.2; 1.2 date 2004.03.04.02.57.00; author simonb; state dead; branches; next 1.1; 1.1 date 2003.07.26.13.27.05; author simonb; state Exp; branches; next ; desc @@ 1.4 log @Use setusercontext(3) Using setusercontext(3) makes per-user tmp work. Fixes PR 55765. @ text @$NetBSD: patch-aa,v 1.3 2010/02/15 17:06:18 joerg Exp $ --- Makefile.in.orig 1997-07-08 06:19:04.000000000 +0000 +++ Makefile.in @@@@ -75,11 +75,11 @@@@ priv: ${OBJ} @@LIBOBJS@@ ${OBJ}: ${srcdir}/priv.h config.h install: all ${srcdir}/priv.1 installdirs - ${INSTALL_PROGRAM} -o root -m ${BINMODE} priv ${bindir}/${binprefix}priv + ${BSD_INSTALL_PROGRAM} priv ${bindir}/${binprefix}priv ${INSTALL_DATA} ${srcdir}/priv.1 ${mandir}/${manprefix}priv.${manext} installdirs: mkinstalldirs - ${srcdir}/mkinstalldirs ${bindir} ${mandir} ${sysconfdir}/priv + ${srcdir}/mkinstalldirs ${bindir} ${mandir} uninstall: rm -f ${bindir}/${binprefix}priv @ 1.3 log @Use SETUID_ROOT_PERMS and allow building as normal user. Bump revision. @ text @d1 1 a1 1 $NetBSD$ @ 1.2 log @Update to priv-1.0-beta2. Changes from previous version are: + Fix a single byte buffer overflow. Can only be a NUL byte that overflows, not believed (at this stage!) to be exploitable in any way. + Avoid null-pointer dereference if getpwuid(getuid()) fails. @ text @d1 1 a1 1 $NetBSD: patch-aa,v 1.1 2003/07/26 13:27:05 simonb Exp $ d3 4 a6 4 --- priv.c.orig 1997-07-08 16:19:06.000000000 +1000 +++ priv.c @@@@ -112,6 +112,12 @@@@ main(int argc, char **argv, char **envp) } d8 11 a18 10 pw = getpwuid(getuid()); + if (pw == NULL) { + syslog(LOG_NOTICE, "%s: can't fetch password entry for uid %d", + myname, getuid()); + errx(EXIT_VAL, "can't fetch password entry for uid %d", + getuid()); + } myname = xstrdup(pw->pw_name); /* copy so we can use getpw* later */ strcpy(myfullname, pw->pw_name); if ((logname = getlogin()) != NULL && strcmp(logname, myname)) { @ 1.1 log @Avoid null-pointer dereference if getpwuid(getuid()) fails. @ text @d1 1 a1 1 $NetBSD$ @