From f1e2dae0f6cc8dd3923ddc1cdd41e7815e3137d9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= Date: Tue, 8 Aug 2006 21:08:46 +0000 Subject: [PATCH] Check return values from seteuid, prompted by MIT advisory. Thanks to Tom Yu at MIT, and Michael Calmer and Marcus Meissner at SUSE. Either of CVE-2006-3083 or CVE-2006-3084. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17874 ec53bebd-3082-4978-b11e-865c3cabbd6b --- appl/rcp/rcp.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/appl/rcp/rcp.c b/appl/rcp/rcp.c index 9ce3c174e..e61246ac3 100644 --- a/appl/rcp/rcp.c +++ b/appl/rcp/rcp.c @@ -272,7 +272,8 @@ tolocal(int argc, char **argv) } free(bp); sink(1, argv + argc - 1); - seteuid(0); + if (seteuid(0) < 0) + exit(1); close(remin); remin = remout = -1; }