Check return values from seteuid, prompted by MIT advisory.
Thanks to Tom Yu at MIT, and Michael Calmer and Marcus Meissner at SUSE. Either of CVE-2006-3083 or CVE-2006-3084. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17874 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -272,7 +272,8 @@ tolocal(int argc, char **argv)
|
|||||||
}
|
}
|
||||||
free(bp);
|
free(bp);
|
||||||
sink(1, argv + argc - 1);
|
sink(1, argv + argc - 1);
|
||||||
seteuid(0);
|
if (seteuid(0) < 0)
|
||||||
|
exit(1);
|
||||||
close(remin);
|
close(remin);
|
||||||
remin = remout = -1;
|
remin = remout = -1;
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user