~ubuntu-branches/ubuntu/feisty/dbus/feisty-security

« back to all changes in this revision

Viewing changes to debian/patches/02_dbus-launch_close_pipe.patch

  • Committer: Bazaar Package Importer
  • Author(s): Kees Cook
  • Date: 2008-10-13 19:48:09 UTC
  • mfrom: (42.1.1 feisty-proposed)
  • Revision ID: james.westby@ubuntu.com-20081013194809-ftswg06eb1b6t3xo
Tags: 1.0.2-1ubuntu4.2
* SECURITY UPDATE: policy bypass with NULL interfaces.
  - Add 82-NULL-policy-bypass.patch: upstream fixes.
  - CVE-2008-0595
* SECURITY UPDATE: application crash via corrupt signatures.
  - Add 83-signature-validation.patch: upstream fixes.
  - CVE-2008-3834

Show diffs side-by-side

added added

removed removed

Lines of Context:
 
1
diff -Nur dbus-1.0.2/dbus/dbus-sysdeps-unix.c dbus-1.0.2.new/dbus/dbus-sysdeps-unix.c
 
2
--- dbus-1.0.2/dbus/dbus-sysdeps-unix.c 2006-12-11 20:21:09.000000000 +0100
 
3
+++ dbus-1.0.2.new/dbus/dbus-sysdeps-unix.c     2007-07-26 11:07:45.000000000 +0200
 
4
@@ -2426,6 +2426,8 @@
 
5
                       _dbus_strerror (errno));
 
6
       _dbus_verbose ("Failed to fork() to call dbus-launch: %s\n",
 
7
                      _dbus_strerror (errno));
 
8
+      close(address_pipe[READ_END]);
 
9
+      close(address_pipe[WRITE_END]);
 
10
       goto out;
 
11
     }
 
12
 
 
13
@@ -2477,6 +2479,7 @@
 
14
       ret = waitpid (pid, &status, 0);
 
15
     }
 
16
   while (ret == -1 && errno == EINTR);
 
17
+  close (address_pipe[READ_END]);
 
18
 
 
19
   /* We succeeded if the process exited with status 0 and
 
20
      anything was read */