diff options
author | Natanael Copa <ncopa@alpinelinux.org> | 2017-11-29 16:22:49 +0000 |
---|---|---|
committer | Natanael Copa <ncopa@alpinelinux.org> | 2017-11-29 16:25:19 +0000 |
commit | fe20e8da2f8b7fb6f208cccf8f369400d947a6a2 (patch) | |
tree | 70741c6972793be929492690674bf786596f43ca /community/shadow/303-Reset-pid_child-only-if-waitpid-was-successful.patch | |
parent | da5ea802a3975665ace500b89e647ebf4007b232 (diff) | |
download | aports-fe20e8da2f8b7fb6f208cccf8f369400d947a6a2.tar.bz2 aports-fe20e8da2f8b7fb6f208cccf8f369400d947a6a2.tar.xz |
community/shadow: upgrade to 4.5
Diffstat (limited to 'community/shadow/303-Reset-pid_child-only-if-waitpid-was-successful.patch')
-rw-r--r-- | community/shadow/303-Reset-pid_child-only-if-waitpid-was-successful.patch | 29 |
1 files changed, 0 insertions, 29 deletions
diff --git a/community/shadow/303-Reset-pid_child-only-if-waitpid-was-successful.patch b/community/shadow/303-Reset-pid_child-only-if-waitpid-was-successful.patch deleted file mode 100644 index 64aeb34131..0000000000 --- a/community/shadow/303-Reset-pid_child-only-if-waitpid-was-successful.patch +++ /dev/null @@ -1,29 +0,0 @@ -From 7d82f203eeec881c584b2fa06539b39e82985d97 Mon Sep 17 00:00:00 2001 -From: Tobias Stoeckmann <tobias@stoeckmann.org> -Date: Sun, 14 May 2017 17:58:10 +0200 -Subject: [PATCH] Reset pid_child only if waitpid was successful. - -Do not reset the pid_child to 0 if the child process is still -running. This else-condition can be reached with pid being -1, -therefore explicitly test this condition. - -This is a regression fix for CVE-2017-2616. If su receives a -signal like SIGTERM, it is not propagated to the child. - -Reported-by: Radu Duta <raduduta@gmail.com> -Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org> ---- - src/su.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - ---- a/src/su.c -+++ b/src/su.c -@@ -363,7 +363,7 @@ static void prepare_pam_close_session (v - /* wake child when resumed */ - kill (pid, SIGCONT); - stop = false; -- } else { -+ } else if ( (pid_t)-1 != pid) { - pid_child = 0; - } - } while (!stop); |