From c920e8daaa4a4a4a601f606eaa4764750fe80639 Mon Sep 17 00:00:00 2001 From: Andreas Willich Date: Sat, 29 Oct 2011 21:43:27 +0200 Subject: update versions --- .../files/xorg-cve-2011-4028+4029.patch | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 x11-base/xorg-server/files/xorg-cve-2011-4028+4029.patch (limited to 'x11-base/xorg-server/files/xorg-cve-2011-4028+4029.patch') diff --git a/x11-base/xorg-server/files/xorg-cve-2011-4028+4029.patch b/x11-base/xorg-server/files/xorg-cve-2011-4028+4029.patch new file mode 100644 index 0000000..66e77f6 --- /dev/null +++ b/x11-base/xorg-server/files/xorg-cve-2011-4028+4029.patch @@ -0,0 +1,22 @@ +diff --git a/os/utils.c b/os/utils.c +index e8ecb71..18ff1ca 100644 +--- a/os/utils.c ++++ b/os/utils.c +@@ -297,7 +297,7 @@ LockServer(void) + FatalError("Could not create lock file in %s\n", tmp); + (void) sprintf(pid_str, "%10ld\n", (long)getpid()); + (void) write(lfd, pid_str, 11); +- (void) chmod(tmp, 0444); ++ (void) fchmod(lfd, 0444); + (void) close(lfd); + + /* +@@ -318,7 +318,7 @@ LockServer(void) + /* + * Read the pid from the existing file + */ +- lfd = open(LockFile, O_RDONLY); ++ lfd = open(LockFile, O_RDONLY|O_NOFOLLOW); + if (lfd < 0) { + unlink(tmp); + FatalError("Can't read lock file %s\n", LockFile); -- cgit v1.2.3-65-gdbad