mirror/libtool
2
0
Fork 0
mirror of git://git.savannah.gnu.org/libtool.git synced 2025-04-06 16:20:23 +08:00
Code Issues Packages Projects Releases Wiki Activity

Scott James Remnant <scott@netsplit.com>

Browse Source 
* m4/ltmain.in: Don't use the mkdir -p option when creating a
temporary output directory so a symlink attack can't be used to
arbitrarily chmod other directories on the system if libtool
gets run as root.
This commit is contained in:
Stefan Nordhausen 2004-01-03 14:45:59 +00:00 committed by Scott James Remnant
parent a85084863f
commit 5f2a0ecae7
2 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ChangeLog
View File

@ -1,3 +1,11 @@
2004-01-03 Stefan Nordhausen <nordhaus@informatik.hu-berlin.de>
Scott James Remnant <scott@netsplit.com>
* m4/ltmain.in: Don't use the mkdir -p option when creating a
temporary output directory so a symlink attack can't be used to
arbitrarily chmod other directories on the system if libtool
gets run as root.
2004-01-02 Peter O'Gorman <peter@pogma.com>
* m4/libtool.m4: Ensure that ${ZSH_VERSION+set} is properly escaped.

2
ltmain.in
View File

@ -5857,7 +5857,7 @@ relink_command=\"$relink_command\""
tmpdir="/tmp"
test -n "$TMPDIR" && tmpdir="$TMPDIR"
tmpdir="$tmpdir/libtool-$$"
if $mkdir -p "$tmpdir" && chmod 700 "$tmpdir"; then :
if $mkdir "$tmpdir" && chmod 700 "$tmpdir"; then :
else
$echo "$modename: error: cannot create temporary directory \`$tmpdir'" 1>&2
continue