Check return values from seteuid, prompted by MIT advisory.
Thanks to Tom Yu at MIT, and Michael Calmer and Marcus Meissner at SUSE. Either of CVE-2006-3083 or CVE-2006-3084. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17874 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -272,7 +272,8 @@ tolocal(int argc, char **argv)
|
||||
}
|
||||
free(bp);
|
||||
sink(1, argv + argc - 1);
|
||||
seteuid(0);
|
||||
if (seteuid(0) < 0)
|
||||
exit(1);
|
||||
close(remin);
|
||||
remin = remout = -1;
|
||||
}
|
||||
|
Reference in New Issue
Block a user