tempfile bug in dialupadmin script

Stephen Gran steve at lobefin.net
Tue Aug 26 15:42:26 CEST 2008


On Tue, Aug 26, 2008 at 02:56:38PM +0200, Alan DeKok said:
> Stephen Gran wrote:
> > We got a bug report in Debian about an unsafe use of a hard coded
> > tempfile in one of the dialupadmin scripts, so I thought I'd pass on our
> > fix.
> 
>   OK.  Any chance I can get you to switch to using the new freeradius
> git tree?  That would let me pull patches in from your tree much more
> easily.

We plan to rebase in the near future - up to now we've been doing a
cvs<->git sync, which was a bit painful and I'm very glad that you've
moved to git :)

>   Or send me an SSH key via private email, and I'll add you to the
> freeradius committers.

I'm not sure that I manage to come up with enough good patches to
warrant that yet :)  If it looks like I am likely to be supplying a
bunch of patches, I'll bug you about it then.  For now, I can send 
git format-patch style patches to the list that you can import with
git-am if that's more helpful.  I'll attach this patch that way.
-- 
 --------------------------------------------------------------------------
|  Stephen Gran                  | BOFH excuse #333:  A plumber is needed, |
|  steve at lobefin.net             | the network drain is clogged            |
|  http://www.lobefin.net/~steve |                                         |
 --------------------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fix-unsafe-use-of-tmpfile.patch
Type: text/x-diff
Size: 2408 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20080826/2f48dc9b/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20080826/2f48dc9b/attachment.pgp>


More information about the Freeradius-Devel mailing list