d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Don't trust TMPDIR if we're setuid root. This is used only for the

Browse Source 
backing file for an anonymous (memory based) btree, and I don't think
that any setuid programs actually use it, but it is better to be safe
than sorry.  This has been in my tree for a long time, maybe a year or
more...

Inspired by: Similar changes in OpenBSD, if memory serves (like nearly
a year ago)
This commit is contained in:
Warner Losh 1998-09-11 05:29:47 +00:00
parent 9bbfa41541
commit 77740e7e34
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
lib/libc/db/btree/bt_open.c
View File

@ -388,10 +388,11 @@ tmp()
{
sigset_t set, oset;
int fd;
char *envtmp;
char *envtmp = NULL;
char path[MAXPATHLEN];
envtmp = getenv("TMPDIR");
if (issetugid() == 0)
envtmp = getenv("TMPDIR");
(void)snprintf(path,
sizeof(path), "%s/bt.XXXXXX", envtmp ? envtmp : "/tmp");