Changeset 1644 in MondoRescue for branches/2.2.5/mondo/src/common/newt-specific.c

Timestamp:

Sep 23, 2007, 2:41:29 AM (17 years ago)

Author:

Bruno Cornec

Message:

Apply patch from Andree Leidenfrost, modified a bit to use bkpinfo->tmpdir instead of /tmp
or MINDI_CACHE when appropriate. Fix security issues in mondo
Thanks al ot Andree for catching all those issues.
Will not compile needs more work as bkpinfo->tmpdir isn't available everywhere
Should become a global in 3.x when only containing pointers.

File:

• branches/2.2.5/mondo/src/common/newt-specific.c (modified) (2 diffs)

branches/2.2.5/mondo/src/common/newt-specific.c

@@ -437 +437 @@
 
         printf("---FATALERROR--- %s\n", error_string);
-        sprintf(command, "gzip -9c %s > /tmp/MA.log.gz 2> /dev/null", MONDO_LOGFILE);
+        sprintf(command, "gzip -9c %s > %s/MA.log.gz 2> /dev/null", MONDO_LOGFILE, MINDI_CACHE);
         system(command);
         printf
@@ -445 +445 @@
                 ("The list's members can help you, if you attach that file to your e-mail.\n");
         printf("Log file: %s\n", MONDO_LOGFILE);
-        if (does_file_exist("/tmp/MA.log.gz")) {
-            printf
-                ("FYI, I have gzipped the log and saved it to /tmp/MA.log.gz\n");
+        if (does_file_exist(MINDI_CACHE"/MA.log.gz")) {
+            printf("FYI, I have gzipped the log and saved it to "MINDI_CACHE"/MA.log.gz.\n");
         }
         printf("Mondo has aborted.\n");