Jelajahi Sumber

Fixed ed symlink vulnerability

git-svn-id: http://svn.linuxfromscratch.org/LFS/trunk/BOOK@949 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
Gerard Beekmans 24 tahun lalu
induk
melakukan
6892a73227
4 mengubah file dengan 15 tambahan dan 1 penghapusan
  1. 7 0
      chapter06/ed-exp.xml
  2. 6 1
      chapter06/ed-inst.xml
  3. 1 0
      chapter06/ed.xml
  4. 1 0
      index.xml

+ 7 - 0
chapter06/ed-exp.xml

@@ -0,0 +1,7 @@
+<sect2>
+<title>Command explanations</title>
+
+<para><userinput>Insert proper symlink bug explanation here.</para>
+
+</sect2>
+

+ 6 - 1
chapter06/ed-inst.xml

@@ -3,7 +3,12 @@
 
 <para>Install Ed by running the following commands:</para>
 
-<para><screen><userinput>./configure --prefix=/usr &amp;&amp;</userinput>
+<para><screen><userinput>cp buf.c buf.c-backup &amp;&amp;</userinput>
+<userinput>sed 's/int u/int u, sfd/' buf.c-temp | \</userinput>
+<userinput>&nbsp;&nbsp;&nbsp;sed '/.*\*mktemp.*/d' | \</userinput>
+<userinput>&nbsp;&nbsp;&nbsp;sed 's/.*if (mktemp.*/  sfd = mkstemp(sfn);\</userinput>
+<userinput>&nbsp;&nbsp;&nbsp;if ((sfd == -1) || (sfp = fopen (sfn, "w+")) == NULL)/' &gt; buf.c</userinput>
+<userinput>./configure --prefix=/usr &amp;&amp;</userinput>
 <userinput>make &amp;&amp;</userinput>
 <userinput>make install &amp;&amp;</userinput>
 <userinput>mv /usr/bin/ed /usr/bin/red /bin</userinput></screen></para>

+ 1 - 0
chapter06/ed.xml

@@ -5,6 +5,7 @@
 Estimated disk space required:  &ed-compsize;</screen>
 
 &c6-ed-inst;
+&c6-ed-exp;
 &aa-ed-desc;
 
 </sect1>

+ 1 - 0
index.xml

@@ -199,6 +199,7 @@
 <!ENTITY c6-makedev-exp SYSTEM "chapter6/makedev-exp.xml">
 <!ENTITY c6-ed SYSTEM "chapter6/ed.xml">
 <!ENTITY c6-ed-inst SYSTEM "chapter6/ed-inst.xml">
+<!ENTITY c6-ed-exp SYSTEM "chapter6/ed-exp.xml">
 <!ENTITY c6-patch SYSTEM "chapter6/patch.xml">
 <!ENTITY c6-patch-inst SYSTEM "chapter6/patch-inst.xml">
 <!ENTITY c6-gcc SYSTEM "chapter6/gcc.xml">