cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
bffaf52a08
openbsd-ports/devel/libgtop/patches/patch-sysdeps_freebsd_procmap.c

72 lines
2.3 KiB
C
Raw Normal View History

Security update for libgtop to libgtop-1.0.13: The Laboratory intexxia found a remote exploitable format string vulnerability in libgtop_daemon which could cause privilege escalation on a remote system. The libgtop_daemon is not running by default if you run GNOME. New since last version: - security fix - update for parallel install with libgtop-2.0 + Only install shared libraries on shared arches. From maintainer (Nils Nordman <nino@nforced.com>).
2001-11-27 18:07:01 -05:00
$OpenBSD: patch-sysdeps_freebsd_procmap.c,v 1.4 2001/11/27 23:07:02 todd Exp $
--- sysdeps/freebsd/procmap.c.orig Mon Nov 26 23:37:59 2001
+++ sysdeps/freebsd/procmap.c Tue Nov 27 21:29:39 2001
portable library for obtaining system information
2001-09-13 16:45:46 -04:00
@@ -32,9 +32,6 @@
#include <sys/param.h>
#include <sys/proc.h>
#include <sys/resource.h>
-#include <vm/vm_object.h>
-#include <vm/vm_prot.h>
-#include <vm/vm_map.h>
#include <sys/vnode.h>
#include <sys/mount.h>
don't use vm/vm.h, from maintainer
2001-11-13 04:03:25 -05:00
@@ -46,9 +43,8 @@
#include <sys/user.h>
#endif
portable library for obtaining system information
2001-09-13 16:45:46 -04:00
#include <sys/sysctl.h>
don't use vm/vm.h, from maintainer
2001-11-13 04:03:25 -05:00
-#include <vm/vm.h>
portable library for obtaining system information
2001-09-13 16:45:46 -04:00
-#if defined(__NetBSD__) && (__NetBSD_Version__ >= 104000000)
+#if (defined(__NetBSD__) && (__NetBSD_Version__ >= 104000000)) || defined(OpenBSD)
/* Fixme ... */
#undef _KERNEL
#define _UVM_UVM_AMAP_I_H_ 1
don't use vm/vm.h, from maintainer
2001-11-13 04:03:25 -05:00
@@ -82,7 +78,7 @@ glibtop_get_proc_map_p (glibtop *server,
portable library for obtaining system information
2001-09-13 16:45:46 -04:00
struct kinfo_proc *pinfo;
struct vm_map_entry entry, *first;
struct vmspace vmspace;
-#if defined(__NetBSD__) && (__NetBSD_Version__ >= 104000000)
+#if (defined(__NetBSD__) && (__NetBSD_Version__ >= 104000000)) || defined(OpenBSD)
struct vnode vnode;
struct inode inode;
#else
don't use vm/vm.h, from maintainer
2001-11-13 04:03:25 -05:00
@@ -142,7 +138,7 @@ glibtop_get_proc_map_p (glibtop *server,
portable library for obtaining system information
2001-09-13 16:45:46 -04:00
/* I tested this a few times with `mmap'; as soon as you write
* to the mmap'ed area, the object type changes from OBJT_VNODE
- * to OBJT_DEFAULT so if seems this really works. */
+ * to OBJT_DEFAULT so it seems this really works. */
do {
if (update) {
don't use vm/vm.h, from maintainer
2001-11-13 04:03:25 -05:00
@@ -163,7 +159,7 @@ glibtop_get_proc_map_p (glibtop *server,
portable library for obtaining system information
2001-09-13 16:45:46 -04:00
continue;
#endif
#else
-#if defined(__NetBSD__) && (__NetBSD_Version__ >= 104000000)
+#if (defined(__NetBSD__) && (__NetBSD_Version__ >= 104000000)) || defined(OpenBSD)
if (UVM_ET_ISSUBMAP (&entry))
continue;
#else
don't use vm/vm.h, from maintainer
2001-11-13 04:03:25 -05:00
@@ -189,7 +185,7 @@ glibtop_get_proc_map_p (glibtop *server,
portable library for obtaining system information
2001-09-13 16:45:46 -04:00
i++;
-#if defined(__NetBSD__) && (__NetBSD_Version__ >= 104000000)
+#if (defined(__NetBSD__) && (__NetBSD_Version__ >= 104000000)) || defined(OpenBSD)
if (!entry.object.uvm_obj)
continue;
Security update for libgtop to libgtop-1.0.13: The Laboratory intexxia found a remote exploitable format string vulnerability in libgtop_daemon which could cause privilege escalation on a remote system. The libgtop_daemon is not running by default if you run GNOME. New since last version: - security fix - update for parallel install with libgtop-2.0 + Only install shared libraries on shared arches. From maintainer (Nils Nordman <nino@nforced.com>).
2001-11-27 18:07:01 -05:00
@@ -213,9 +209,7 @@ glibtop_get_proc_map_p (glibtop *server,
portable library for obtaining system information
2001-09-13 16:45:46 -04:00
glibtop_error_io_r (server, "kvm_read (object)");
#endif
-#if defined(__NetBSD__) && (__NetBSD_Version__ >= 104000000)
Security update for libgtop to libgtop-1.0.13: The Laboratory intexxia found a remote exploitable format string vulnerability in libgtop_daemon which could cause privilege escalation on a remote system. The libgtop_daemon is not running by default if you run GNOME. New since last version: - security fix - update for parallel install with libgtop-2.0 + Only install shared libraries on shared arches. From maintainer (Nils Nordman <nino@nforced.com>).
2001-11-27 18:07:01 -05:00
- if (!vnode.v_uvm.u_flags & UVM_VNODE_VALID)
- continue;
portable library for obtaining system information
2001-09-13 16:45:46 -04:00
+#if (defined(__NetBSD__) && (__NetBSD_Version__ >= 104000000)) || defined(OpenBSD)
Security update for libgtop to libgtop-1.0.13: The Laboratory intexxia found a remote exploitable format string vulnerability in libgtop_daemon which could cause privilege escalation on a remote system. The libgtop_daemon is not running by default if you run GNOME. New since last version: - security fix - update for parallel install with libgtop-2.0 + Only install shared libraries on shared arches. From maintainer (Nils Nordman <nino@nforced.com>).
2001-11-27 18:07:01 -05:00
if ((vnode.v_type != VREG) || (vnode.v_tag != VT_UFS) ||
!vnode.v_data) continue;
Reference in New Issue Copy Permalink