head 1.2; access; symbols pkgsrc-2026Q1:1.2.0.102 pkgsrc-2026Q1-base:1.2 pkgsrc-2025Q4:1.2.0.100 pkgsrc-2025Q4-base:1.2 pkgsrc-2025Q3:1.2.0.98 pkgsrc-2025Q3-base:1.2 pkgsrc-2025Q2:1.2.0.96 pkgsrc-2025Q2-base:1.2 pkgsrc-2025Q1:1.2.0.94 pkgsrc-2025Q1-base:1.2 pkgsrc-2024Q4:1.2.0.92 pkgsrc-2024Q4-base:1.2 pkgsrc-2024Q3:1.2.0.90 pkgsrc-2024Q3-base:1.2 pkgsrc-2024Q2:1.2.0.88 pkgsrc-2024Q2-base:1.2 pkgsrc-2024Q1:1.2.0.86 pkgsrc-2024Q1-base:1.2 pkgsrc-2023Q4:1.2.0.84 pkgsrc-2023Q4-base:1.2 pkgsrc-2023Q3:1.2.0.82 pkgsrc-2023Q3-base:1.2 pkgsrc-2023Q2:1.2.0.80 pkgsrc-2023Q2-base:1.2 pkgsrc-2023Q1:1.2.0.78 pkgsrc-2023Q1-base:1.2 pkgsrc-2022Q4:1.2.0.76 pkgsrc-2022Q4-base:1.2 pkgsrc-2022Q3:1.2.0.74 pkgsrc-2022Q3-base:1.2 pkgsrc-2022Q2:1.2.0.72 pkgsrc-2022Q2-base:1.2 pkgsrc-2022Q1:1.2.0.70 pkgsrc-2022Q1-base:1.2 pkgsrc-2021Q4:1.2.0.68 pkgsrc-2021Q4-base:1.2 pkgsrc-2021Q3:1.2.0.66 pkgsrc-2021Q3-base:1.2 pkgsrc-2021Q2:1.2.0.64 pkgsrc-2021Q2-base:1.2 pkgsrc-2021Q1:1.2.0.62 pkgsrc-2021Q1-base:1.2 pkgsrc-2020Q4:1.2.0.60 pkgsrc-2020Q4-base:1.2 pkgsrc-2020Q3:1.2.0.58 pkgsrc-2020Q3-base:1.2 pkgsrc-2020Q2:1.2.0.54 pkgsrc-2020Q2-base:1.2 pkgsrc-2020Q1:1.2.0.34 pkgsrc-2020Q1-base:1.2 pkgsrc-2019Q4:1.2.0.56 pkgsrc-2019Q4-base:1.2 pkgsrc-2019Q3:1.2.0.52 pkgsrc-2019Q3-base:1.2 pkgsrc-2019Q2:1.2.0.50 pkgsrc-2019Q2-base:1.2 pkgsrc-2019Q1:1.2.0.48 pkgsrc-2019Q1-base:1.2 pkgsrc-2018Q4:1.2.0.46 pkgsrc-2018Q4-base:1.2 pkgsrc-2018Q3:1.2.0.44 pkgsrc-2018Q3-base:1.2 pkgsrc-2018Q2:1.2.0.42 pkgsrc-2018Q2-base:1.2 pkgsrc-2018Q1:1.2.0.40 pkgsrc-2018Q1-base:1.2 pkgsrc-2017Q4:1.2.0.38 pkgsrc-2017Q4-base:1.2 pkgsrc-2017Q3:1.2.0.36 pkgsrc-2017Q3-base:1.2 pkgsrc-2017Q2:1.2.0.32 pkgsrc-2017Q2-base:1.2 pkgsrc-2017Q1:1.2.0.30 pkgsrc-2017Q1-base:1.2 pkgsrc-2016Q4:1.2.0.28 pkgsrc-2016Q4-base:1.2 pkgsrc-2016Q3:1.2.0.26 pkgsrc-2016Q3-base:1.2 pkgsrc-2016Q2:1.2.0.24 pkgsrc-2016Q2-base:1.2 pkgsrc-2016Q1:1.2.0.22 pkgsrc-2016Q1-base:1.2 pkgsrc-2015Q4:1.2.0.20 pkgsrc-2015Q4-base:1.2 pkgsrc-2015Q3:1.2.0.18 pkgsrc-2015Q3-base:1.2 pkgsrc-2015Q2:1.2.0.16 pkgsrc-2015Q2-base:1.2 pkgsrc-2015Q1:1.2.0.14 pkgsrc-2015Q1-base:1.2 pkgsrc-2014Q4:1.2.0.12 pkgsrc-2014Q4-base:1.2 pkgsrc-2014Q3:1.2.0.10 pkgsrc-2014Q3-base:1.2 pkgsrc-2014Q2:1.2.0.8 pkgsrc-2014Q2-base:1.2 pkgsrc-2014Q1:1.2.0.6 pkgsrc-2014Q1-base:1.2 pkgsrc-2013Q4:1.2.0.4 pkgsrc-2013Q4-base:1.2 pkgsrc-2013Q3:1.2.0.2 pkgsrc-2013Q3-base:1.2 pkgsrc-2013Q2:1.1.0.44 pkgsrc-2013Q2-base:1.1 pkgsrc-2013Q1:1.1.0.42 pkgsrc-2013Q1-base:1.1 pkgsrc-2012Q4:1.1.0.40 pkgsrc-2012Q4-base:1.1 pkgsrc-2012Q3:1.1.0.38 pkgsrc-2012Q3-base:1.1 pkgsrc-2012Q2:1.1.0.36 pkgsrc-2012Q2-base:1.1 pkgsrc-2012Q1:1.1.0.34 pkgsrc-2012Q1-base:1.1 pkgsrc-2011Q4:1.1.0.32 pkgsrc-2011Q4-base:1.1 pkgsrc-2011Q3:1.1.0.30 pkgsrc-2011Q3-base:1.1 pkgsrc-2011Q2:1.1.0.28 pkgsrc-2011Q2-base:1.1 pkgsrc-2011Q1:1.1.0.26 pkgsrc-2011Q1-base:1.1 pkgsrc-2010Q4:1.1.0.24 pkgsrc-2010Q4-base:1.1 pkgsrc-2010Q3:1.1.0.22 pkgsrc-2010Q3-base:1.1 pkgsrc-2010Q2:1.1.0.20 pkgsrc-2010Q2-base:1.1 pkgsrc-2010Q1:1.1.0.18 pkgsrc-2010Q1-base:1.1 pkgsrc-2009Q4:1.1.0.16 pkgsrc-2009Q4-base:1.1 pkgsrc-2009Q3:1.1.0.14 pkgsrc-2009Q3-base:1.1 pkgsrc-2009Q2:1.1.0.12 pkgsrc-2009Q2-base:1.1 pkgsrc-2009Q1:1.1.0.10 pkgsrc-2009Q1-base:1.1 pkgsrc-2008Q4:1.1.0.8 pkgsrc-2008Q4-base:1.1 pkgsrc-2008Q3:1.1.0.6 pkgsrc-2008Q3-base:1.1 cube-native-xorg:1.1.0.4 cube-native-xorg-base:1.1 pkgsrc-2008Q2:1.1.0.2; locks; strict; comment @# @; 1.2 date 2013.07.19.12.54.58; author joerg; state Exp; branches; next 1.1; commitid 5dnuPJbomDyL25Yw; 1.1 date 2008.07.25.03.38.01; author tonnerre; state Exp; branches 1.1.2.1; next ; 1.1.2.1 date 2008.07.25.03.38.01; author rtr; state dead; branches; next 1.1.2.2; 1.1.2.2 date 2008.07.25.09.48.35; author rtr; state Exp; branches; next ; desc @@ 1.2 log @Add missing termios.h includes. @ text @$NetBSD: patch-ad,v 1.1 2008/07/25 03:38:01 tonnerre Exp $ --- misc.c.orig 2007-04-01 17:56:30.000000000 +0000 +++ misc.c @@@@ -7,6 +7,7 @@@@ #include #include #include +#include #ifdef HAVE_TERMIO_H @@@@ -108,8 +109,17 @@@@ int win; /* 0 for upper, 1 for lower */ /* "touch" the tty so 'w' reports proper idle times */ (void) utime(get_ttyname(), NULL); + /* Set our gid to our real gid if necessary */ + if (setgid(getgid()) != 0) { + perror("setgid"); + exit(EXIT_FAILURE); + } + /* Set our uid to our real uid if necessary */ - (void) setuid(getuid()); + if (setuid(getuid()) != 0) { + perror("setgid"); + exit(EXIT_FAILURE); + } /* Run the requested program, with possible leading dash. */ execvp(((*argv[0] == '-') ? argv[0]+1 : argv[0]), argv); @@@@ -876,8 +886,17 @@@@ char *type; } close(pipe_fds[0]); close(pipe_fds[1]); + /* Set our gid to our real gid if necessary */ + if (setgid(getgid()) != 0) { + perror("setgid"); + exit(EXIT_FAILURE); + } + /* Set our uid to our real uid if necessary */ - (void) setuid(getuid()); + if (setuid(getuid()) != 0) { + perror("setuid"); + exit(EXIT_FAILURE); + } /* Run the requested program */ argv[0]="/bin/sh"; @ 1.1 log @Update splitvt to 1.6.6 and add patches for the "forgotten setgid()" privilege escalation vulnerability (CVE-2008-0162). Also verify the return values of setuid()/setgid(). @ text @d1 1 a1 1 $NetBSD$ d3 1 a3 1 --- misc.c.orig 2007-04-01 19:56:30.000000000 +0200 d5 9 a13 1 @@@@ -108,8 +108,17 @@@@ int win; /* 0 for upper, 1 for lower */ d32 1 a32 1 @@@@ -876,8 +885,17 @@@@ char *type; @ 1.1.2.1 log @file patch-ad was added on branch pkgsrc-2008Q2 on 2008-07-25 09:48:35 +0000 @ text @d1 42 @ 1.1.2.2 log @pullup ticket #2463 requested by tonnerre splitvt: update package for security fix revisions pulled up: pkgsrc/misc/splitvt/Makefile 1.20 pkgsrc/misc/splitvt/distinfo 1.5 pkgsrc/misc/splitvt/patches/patch-ab 1.2 pkgsrc/misc/splitvt/patches/patch-ad 1.1 Module Name: pkgsrc Committed By: tonnerre Date: Fri Jul 25 03:38:01 UTC 2008 Modified Files: pkgsrc/misc/splitvt: Makefile distinfo pkgsrc/misc/splitvt/patches: patch-ab Added Files: pkgsrc/misc/splitvt/patches: patch-ad Log Message: Update splitvt to 1.6.6 and add patches for the "forgotten setgid()" privilege escalation vulnerability (CVE-2008-0162). Also verify the return values of setuid()/setgid(). @ text @a0 42 $NetBSD: patch-ad,v 1.1 2008/07/25 03:38:01 tonnerre Exp $ --- misc.c.orig 2007-04-01 19:56:30.000000000 +0200 +++ misc.c @@@@ -108,8 +108,17 @@@@ int win; /* 0 for upper, 1 for lower */ /* "touch" the tty so 'w' reports proper idle times */ (void) utime(get_ttyname(), NULL); + /* Set our gid to our real gid if necessary */ + if (setgid(getgid()) != 0) { + perror("setgid"); + exit(EXIT_FAILURE); + } + /* Set our uid to our real uid if necessary */ - (void) setuid(getuid()); + if (setuid(getuid()) != 0) { + perror("setgid"); + exit(EXIT_FAILURE); + } /* Run the requested program, with possible leading dash. */ execvp(((*argv[0] == '-') ? argv[0]+1 : argv[0]), argv); @@@@ -876,8 +885,17 @@@@ char *type; } close(pipe_fds[0]); close(pipe_fds[1]); + /* Set our gid to our real gid if necessary */ + if (setgid(getgid()) != 0) { + perror("setgid"); + exit(EXIT_FAILURE); + } + /* Set our uid to our real uid if necessary */ - (void) setuid(getuid()); + if (setuid(getuid()) != 0) { + perror("setuid"); + exit(EXIT_FAILURE); + } /* Run the requested program */ argv[0]="/bin/sh"; @