mirror/freebsd
1
0
Fork 0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-17 10:26:15 +00:00
Code Issues Releases Activity

Add rcsid[]

Browse Source 
Since locale reading code not resistent against stack overflowing or
similar intruder attacks, don't allow PATH_LOCALE env variable action
for s-bit programs (non-standard locale path setting)
This commit is contained in:
Andrey A. Chernov 1996-11-27 22:30:44 +00:00
parent 28c5126cfb
commit e2900279d2
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=19988
1 changed files with 19 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
lib/libc/locale/setlocale.c
View File

@ -33,19 +33,26 @@
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*
* $Id$
* $Id: setlocale.c,v 1.10 1996/11/26 08:00:17 ache Exp $
*/
#ifdef LIBC_RCS
static const char rcsid[] =
"$Id$";
#endif
#if defined(LIBC_SCCS) && !defined(lint)
static char sccsid[] = "@(#)setlocale.c 8.1 (Berkeley) 7/4/93";
#endif /* LIBC_SCCS and not lint */
#include <sys/types.h>
#include <sys/stat.h>
#include <limits.h>
#include <locale.h>
#include <rune.h>
#include <stdlib.h>
#include <string.h>
#include <sys/stat.h>
#include <unistd.h>
#include "collate.h"
/*
@ -225,22 +232,21 @@ loadlocale(category)
char *new = new_categories[category];
char *old = current_categories[category];
if (strcmp(new, old) == 0)
return (old);
if ( !_PathLocale
&& strcmp(new, "C") && strcmp(new, "POSIX")
) {
char *pl = getenv("PATH_LOCALE");
if (!pl)
if (!_PathLocale) {
if ( !(ret = getenv("PATH_LOCALE"))
|| getuid() != geteuid()
|| getgid() != getegid()
)
_PathLocale = _PATH_LOCALE;
else if ( strlen(pl) + 45 > PATH_MAX
|| !(_PathLocale = strdup(pl))
else if ( strlen(ret) + 45 > PATH_MAX
|| !(_PathLocale = strdup(ret))
)
return (NULL);
}
if (strcmp(new, old) == 0)
return (old);
if (category == LC_CTYPE) {
#ifdef XPG4
ret = _xpg4_setrunelocale(new) ? NULL : new;