File rnd_jue-3.3.0.0-src_libgame_setup.c-CVE-2011-46... of Package rnd_jue

Overview Repositories Revisions Requests Users Attributes Meta

File rnd_jue-3.3.0.0-src_libgame_setup.c-CVE-2011-4606.patch of Package rnd_jue

--- src/libgame/setup.c.orig	2010-03-27 21:40:16.000000000 +0100
+++ src/libgame/setup.c	2014-10-03 10:45:53.671561131 +0200
@@ -1285,11 +1285,14 @@
 #define MODE_W_ALL		(S_IWUSR | S_IWGRP | S_IWOTH)
 #define MODE_X_ALL		(S_IXUSR | S_IXGRP | S_IXOTH)
 
+#define MODE_R_PRIVATE		(S_IRUSR)
 #define MODE_W_PRIVATE		(S_IWUSR)
+#define MODE_X_PRIVATE		(S_IXUSR)
+
 #define MODE_W_PUBLIC		(S_IWUSR | S_IWGRP)
 #define MODE_W_PUBLIC_DIR	(S_IWUSR | S_IWGRP | S_ISGID)
 
-#define DIR_PERMS_PRIVATE	(MODE_R_ALL | MODE_X_ALL | MODE_W_PRIVATE)
+#define DIR_PERMS_PRIVATE	(MODE_R_PRIVATE | MODE_X_PRIVATE | MODE_W_PRIVATE)
 #define DIR_PERMS_PUBLIC	(MODE_R_ALL | MODE_X_ALL | MODE_W_PUBLIC_DIR)
 
 #define FILE_PERMS_PRIVATE	(MODE_R_ALL | MODE_W_PRIVATE)
@@ -1448,7 +1451,8 @@
   if (running_setgid)
     posix_umask(last_umask & group_umask);
   else
-    dir_mode |= MODE_W_ALL;
+    if (permission_class == PERMS_PUBLIC)
+      dir_mode |= MODE_W_ALL;
 
   if (!fileExists(dir))
     if (posix_mkdir(dir, dir_mode) != 0)

Places

File rnd_jue-3.3.0.0-src_libgame_setup.c-CVE-2011-4606.patch of Package rnd_jue

Places