Gentoo Archives: gentoo-commits

From: "Markus Meier (maekke)" <maekke@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] gentoo-x86 commit in media-gfx/blender/files: blender-2.45-cve-2008-1103-1.patch blender-2.45-cve-2008-1103-2.patch
Date: Wed, 07 May 2008 21:07:29
Message-Id: E1JtqrG-0007SP-Sv@stork.gentoo.org
1 maekke 08/05/07 21:07:26
2
3 Added: blender-2.45-cve-2008-1103-1.patch
4 blender-2.45-cve-2008-1103-2.patch
5 Log:
6 security bump, add CVE-2008-1103 patches from fedora, security bug #219008
7 (Portage version: 2.1.5_rc7)
8
9 Revision Changes Path
10 1.1 media-gfx/blender/files/blender-2.45-cve-2008-1103-1.patch
11
12 file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/media-gfx/blender/files/blender-2.45-cve-2008-1103-1.patch?rev=1.1&view=markup
13 plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/media-gfx/blender/files/blender-2.45-cve-2008-1103-1.patch?rev=1.1&content-type=text/plain
14
15 Index: blender-2.45-cve-2008-1103-1.patch
16 ===================================================================
17 diff -urN blender-2.36.orig/source/blender/blenkernel/intern/blender.c blender-2.36/source/blender/blenkernel/intern/blender.c
18 --- blender-2.36.orig/source/blender/blenkernel/intern/blender.c 2005-03-11 01:54:56.000000000 +0900
19 +++ blender-2.36/source/blender/blenkernel/intern/blender.c 2005-03-11 01:57:26.000000000 +0900
20 @@ -647,7 +647,7 @@
21
22 BLI_make_file_string("/", str, U.tempdir, "quit.blend");
23
24 - file = open(str,O_BINARY+O_WRONLY+O_CREAT+O_TRUNC, 0666);
25 + file = open(str,O_BINARY+O_WRONLY+O_CREAT+O_TRUNC+O_EXCL, 0666);
26 if(file == -1) {
27 printf("Unable to save %s\n", str);
28 return;
29
30
31
32 1.1 media-gfx/blender/files/blender-2.45-cve-2008-1103-2.patch
33
34 file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/media-gfx/blender/files/blender-2.45-cve-2008-1103-2.patch?rev=1.1&view=markup
35 plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/media-gfx/blender/files/blender-2.45-cve-2008-1103-2.patch?rev=1.1&content-type=text/plain
36
37 Index: blender-2.45-cve-2008-1103-2.patch
38 ===================================================================
39 diff -up blender-2.45/source/blender/src/usiblender.c.cve3 blender-2.45/source/blender/src/usiblender.c
40 --- blender-2.45/source/blender/src/usiblender.c.cve3 2007-09-18 06:58:42.000000000 +0200
41 +++ blender-2.45/source/blender/src/usiblender.c 2008-05-07 17:32:10.000000000 +0200
42 @@ -172,10 +172,12 @@ static void init_userdef_file(void)
43 U.tb_rightmouse= 5;
44 }
45 if(U.mixbufsize==0) U.mixbufsize= 2048;
46 - if (BLI_streq(U.tempdir, "/")) {
47 + if (BLI_streq(U.tempdir, "/") || BLI_streq(U.tempdir, "/tmp/")) {
48 char *tmp= getenv("TEMP");
49 + char *home= getenv("HOME");
50
51 - strcpy(U.tempdir, tmp?tmp:"/tmp/");
52 + strcpy(U.tempdir, tmp?tmp:home);
53 + if (!tmp) strcat(U.tempdir, "/.blender/");
54 }
55 if (U.savetime <= 0) {
56 U.savetime = 1;
57
58
59
60 --
61 gentoo-commits@l.g.o mailing list