1 |
chainsaw 09/04/03 15:03:25 |
2 |
|
3 |
Added: asterisk-1.2.32-svn89254.diff |
4 |
asterisk-1.2.32-comma-is-not-pipe.diff |
5 |
Log: |
6 |
Version bump for security bug #237476. BRIstuff, which already seemed fragile to me just plain broke this time. Unless you include a patch to make it work, or link to something newer then 0.3.0-PRE-1y-w, a bug report will not be accepted. |
7 |
(Portage version: 2.1.6.11/cvs/Linux x86_64) |
8 |
|
9 |
Revision Changes Path |
10 |
1.1 net-misc/asterisk/files/1.2.0/asterisk-1.2.32-svn89254.diff |
11 |
|
12 |
file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-misc/asterisk/files/1.2.0/asterisk-1.2.32-svn89254.diff?rev=1.1&view=markup |
13 |
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-misc/asterisk/files/1.2.0/asterisk-1.2.32-svn89254.diff?rev=1.1&content-type=text/plain |
14 |
|
15 |
Index: asterisk-1.2.32-svn89254.diff |
16 |
=================================================================== |
17 |
diff -uNr asterisk-1.2.32.ORIG/channels/chan_iax2.c asterisk-1.2.32/channels/chan_iax2.c |
18 |
--- asterisk-1.2.32.ORIG/channels/chan_iax2.c 2009-04-03 14:55:59.000000000 +0100 |
19 |
+++ asterisk-1.2.32/channels/chan_iax2.c 2009-04-03 14:57:05.000000000 +0100 |
20 |
@@ -1445,7 +1445,7 @@ |
21 |
ast_log(LOG_WARNING, "Cannot open '%s': %s\n", s, strerror(errno)); |
22 |
return -1; |
23 |
} |
24 |
- fd = open(s2, O_RDWR | O_CREAT | O_EXCL); |
25 |
+ fd = open(s2, O_RDWR | O_CREAT | O_EXCL, 0600); |
26 |
if (fd < 0) { |
27 |
ast_log(LOG_WARNING, "Cannot open '%s' for writing: %s\n", s2, strerror(errno)); |
28 |
close(ifd); |
29 |
|
30 |
|
31 |
|
32 |
1.1 net-misc/asterisk/files/1.2.0/asterisk-1.2.32-comma-is-not-pipe.diff |
33 |
|
34 |
file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-misc/asterisk/files/1.2.0/asterisk-1.2.32-comma-is-not-pipe.diff?rev=1.1&view=markup |
35 |
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-misc/asterisk/files/1.2.0/asterisk-1.2.32-comma-is-not-pipe.diff?rev=1.1&content-type=text/plain |
36 |
|
37 |
Index: asterisk-1.2.32-comma-is-not-pipe.diff |
38 |
=================================================================== |
39 |
diff -uNr asterisk-1.2.32.ORIG/apps/app_chanspy.c asterisk-1.2.32/apps/app_chanspy.c |
40 |
--- asterisk-1.2.32.ORIG/apps/app_chanspy.c 2009-04-03 15:08:26.000000000 +0100 |
41 |
+++ asterisk-1.2.32/apps/app_chanspy.c 2009-04-03 15:10:40.000000000 +0100 |
42 |
@@ -438,7 +438,7 @@ |
43 |
if (recbase) { |
44 |
char filename[512]; |
45 |
snprintf(filename,sizeof(filename),"%s/%s.%d.raw",ast_config_AST_MONITOR_DIR, recbase, (int)time(NULL)); |
46 |
- if ((fd = open(filename, O_CREAT | O_WRONLY, O_TRUNC, 0644)) <= 0) { |
47 |
+ if ((fd = open(filename, O_CREAT | O_WRONLY | O_TRUNC, 0644)) <= 0) { |
48 |
ast_log(LOG_WARNING, "Cannot open %s for recording\n", filename); |
49 |
fd = 0; |
50 |
} |