From adeb789b91635cbd3aba5503feebf5964d064cbd Mon Sep 17 00:00:00 2001 From: Hajimu UMEMOTO Date: Fri, 8 Oct 2004 18:09:16 +0000 Subject: fix http://vuxml.freebsd.org/92268205-1947-11d9-bc4a-000c41e2cdad.html Reported by: nectar Approved by: portmgr (krion) Obtained from: https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/lib/common.c#rev1.104 --- security/cyrus-sasl2/files/patch-lib::common.c | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 security/cyrus-sasl2/files/patch-lib::common.c (limited to 'security/cyrus-sasl2/files') diff --git a/security/cyrus-sasl2/files/patch-lib::common.c b/security/cyrus-sasl2/files/patch-lib::common.c new file mode 100644 index 000000000000..76b66e7b5e86 --- /dev/null +++ b/security/cyrus-sasl2/files/patch-lib::common.c @@ -0,0 +1,16 @@ +Index: lib/common.c +diff -u -p lib/common.c.orig lib/common.c +--- lib/common.c.orig Wed Jul 7 01:03:05 2004 ++++ lib/common.c Sat Oct 9 02:03:02 2004 +@@ -1838,7 +1838,10 @@ _sasl_getpath(void *context __attribute_ + if (! path) + return SASL_BADPARAM; + +- *path = getenv(SASL_PATH_ENV_VAR); ++ /* Honor external variable only in a safe environment */ ++ if (getuid() == geteuid() && getgid() == getegid()) ++ *path = getenv(SASL_PATH_ENV_VAR); ++ + if (! *path) + *path = PLUGINDIR; + -- cgit v1.2.3