head	1.2;
access;
symbols
	pkgsrc-2017Q3:1.1.0.90
	pkgsrc-2017Q3-base:1.1
	pkgsrc-2017Q2:1.1.0.86
	pkgsrc-2017Q2-base:1.1
	pkgsrc-2017Q1:1.1.0.84
	pkgsrc-2017Q1-base:1.1
	pkgsrc-2016Q4:1.1.0.82
	pkgsrc-2016Q4-base:1.1
	pkgsrc-2016Q3:1.1.0.80
	pkgsrc-2016Q3-base:1.1
	pkgsrc-2016Q2:1.1.0.78
	pkgsrc-2016Q2-base:1.1
	pkgsrc-2016Q1:1.1.0.76
	pkgsrc-2016Q1-base:1.1
	pkgsrc-2015Q4:1.1.0.74
	pkgsrc-2015Q4-base:1.1
	pkgsrc-2015Q3:1.1.0.72
	pkgsrc-2015Q3-base:1.1
	pkgsrc-2015Q2:1.1.0.70
	pkgsrc-2015Q2-base:1.1
	pkgsrc-2015Q1:1.1.0.68
	pkgsrc-2015Q1-base:1.1
	pkgsrc-2014Q4:1.1.0.66
	pkgsrc-2014Q4-base:1.1
	pkgsrc-2014Q3:1.1.0.64
	pkgsrc-2014Q3-base:1.1
	pkgsrc-2014Q2:1.1.0.62
	pkgsrc-2014Q2-base:1.1
	pkgsrc-2014Q1:1.1.0.60
	pkgsrc-2014Q1-base:1.1
	pkgsrc-2013Q4:1.1.0.58
	pkgsrc-2013Q4-base:1.1
	pkgsrc-2013Q3:1.1.0.56
	pkgsrc-2013Q3-base:1.1
	pkgsrc-2013Q2:1.1.0.54
	pkgsrc-2013Q2-base:1.1
	pkgsrc-2013Q1:1.1.0.52
	pkgsrc-2013Q1-base:1.1
	pkgsrc-2012Q4:1.1.0.50
	pkgsrc-2012Q4-base:1.1
	pkgsrc-2012Q3:1.1.0.48
	pkgsrc-2012Q3-base:1.1
	pkgsrc-2012Q2:1.1.0.46
	pkgsrc-2012Q2-base:1.1
	pkgsrc-2012Q1:1.1.0.44
	pkgsrc-2012Q1-base:1.1
	pkgsrc-2011Q4:1.1.0.42
	pkgsrc-2011Q4-base:1.1
	pkgsrc-2011Q3:1.1.0.40
	pkgsrc-2011Q3-base:1.1
	pkgsrc-2011Q2:1.1.0.38
	pkgsrc-2011Q2-base:1.1
	pkgsrc-2011Q1:1.1.0.36
	pkgsrc-2011Q1-base:1.1
	pkgsrc-2010Q4:1.1.0.34
	pkgsrc-2010Q4-base:1.1
	pkgsrc-2010Q3:1.1.0.32
	pkgsrc-2010Q3-base:1.1
	pkgsrc-2010Q2:1.1.0.30
	pkgsrc-2010Q2-base:1.1
	pkgsrc-2010Q1:1.1.0.28
	pkgsrc-2010Q1-base:1.1
	pkgsrc-2009Q4:1.1.0.26
	pkgsrc-2009Q4-base:1.1
	pkgsrc-2009Q3:1.1.0.24
	pkgsrc-2009Q3-base:1.1
	pkgsrc-2009Q2:1.1.0.22
	pkgsrc-2009Q2-base:1.1
	pkgsrc-2009Q1:1.1.0.20
	pkgsrc-2009Q1-base:1.1
	pkgsrc-2008Q4:1.1.0.18
	pkgsrc-2008Q4-base:1.1
	pkgsrc-2008Q3:1.1.0.16
	pkgsrc-2008Q3-base:1.1
	cube-native-xorg:1.1.0.14
	cube-native-xorg-base:1.1
	pkgsrc-2008Q2:1.1.0.12
	pkgsrc-2008Q2-base:1.1
	cwrapper:1.1.0.10
	pkgsrc-2008Q1:1.1.0.8
	pkgsrc-2008Q1-base:1.1
	pkgsrc-2007Q4:1.1.0.6
	pkgsrc-2007Q4-base:1.1
	pkgsrc-2007Q3:1.1.0.4
	pkgsrc-2007Q3-base:1.1
	pkgsrc-2007Q2:1.1.0.2;
locks; strict;
comment	@# @;


1.2
date	2017.09.29.14.05.37;	author kamil;	state dead;
branches;
next	1.1;
commitid	GvS3YdZggBiM969A;

1.1
date	2007.07.03.12.32.28;	author lkundrak;	state Exp;
branches
	1.1.2.1;
next	;

1.1.2.1
date	2007.07.03.12.32.28;	author ghen;	state dead;
branches;
next	1.1.2.2;

1.1.2.2
date	2007.07.10.10.01.55;	author ghen;	state Exp;
branches;
next	;


desc
@@


1.2
log
@gdb6: Remove this package

gdb6 has been eliminated from pkgsrc and moved to pkgsrc-wip/gdb6 for those
who still may care about it. pkgsrc developers no longer intend to maintain
this version in the main repository.
@
text
@$NetBSD: patch-bp,v 1.1 2007/07/03 12:32:28 lkundrak Exp $

Patch for CVE-2005-1705 from Gentoo #88398.

--- gdb/main.c.orig	2004-07-26 21:01:36.000000000 +0200
+++ gdb/main.c
@@@@ -696,7 +696,7 @@@@ extern int gdbtk_test (char *);
 
   if (!homedir
       || memcmp ((char *) &homebuf, (char *) &cwdbuf, sizeof (struct stat)))
-    if (!inhibit_gdbinit)
+    if (!inhibit_gdbinit && (cwdbuf.st_uid == getuid()) && (!cwdbuf.st_mode & (S_IWOTH)))
       {
 	catch_command_errors (source_command, gdbinit, 0, RETURN_MASK_ALL);
       }
@


1.1
log
@Backported fixes for CAN-2005-1704 and CAN-2005-1705.
@
text
@d1 1
a1 1
$NetBSD$
@


1.1.2.1
log
@file patch-bp was added on branch pkgsrc-2007Q2 on 2007-07-10 10:01:55 +0000
@
text
@d1 15
@


1.1.2.2
log
@Pullup ticket 2134 - requested by lkundrak
security fix for gdb

- pkgsrc/devel/gdb6/Makefile				1.21
- pkgsrc/devel/gdb6/distinfo				1.11
- pkgsrc/devel/gdb6/patches/patch-bo			1.1
- pkgsrc/devel/gdb6/patches/patch-bp			1.1

   Module Name:    pkgsrc
   Committed By: lkundrak
   Date:         Tue Jul  3 12:32:28 UTC 2007

   Modified Files:
	   pkgsrc/devel/gdb6: Makefile distinfo
   Added Files:
	   pkgsrc/devel/gdb6/patches: patch-bo patch-bp

   Log Message:
   Backported fixes for CAN-2005-1704 and CAN-2005-1705.
@
text
@a0 15
$NetBSD$

Patch for CVE-2005-1705 from Gentoo #88398.

--- gdb/main.c.orig	2004-07-26 21:01:36.000000000 +0200
+++ gdb/main.c
@@@@ -696,7 +696,7 @@@@ extern int gdbtk_test (char *);
 
   if (!homedir
       || memcmp ((char *) &homebuf, (char *) &cwdbuf, sizeof (struct stat)))
-    if (!inhibit_gdbinit)
+    if (!inhibit_gdbinit && (cwdbuf.st_uid == getuid()) && (!cwdbuf.st_mode & (S_IWOTH)))
       {
 	catch_command_errors (source_command, gdbinit, 0, RETURN_MASK_ALL);
       }
@