From: genone <genone@gentoo.org>
Date: Sun, 31 Oct 2004 00:43:00 +0000 (-0000)
Subject: I don't want to fix qpkg bugs
X-Git-Tag: gentoolkit-0.2.4.3~337
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=36a03cd82949383f6d07d9fe6c2e1b0aa977d730;p=gentoolkit.git

I don't want to fix qpkg bugs

svn path=/; revision=165
---

diff --git a/trunk/ChangeLog b/trunk/ChangeLog
index d530c47..ad0e279 100644
--- a/trunk/ChangeLog
+++ b/trunk/ChangeLog
@@ -1,3 +1,6 @@
+2004-10-31 Marius Mauch <genone@gentoo.org>
+	* qpkg: security fix for bug #68846
+
 2004-10-20 Karl Trygve Kalleberg <karltk@gentoo.org>
 	* etcat: fixed get_use_vars to get_use_flags, fixes #67349.
 
diff --git a/trunk/src/qpkg/qpkg b/trunk/src/qpkg/qpkg
index 0c06094..dd8344b 100644
--- a/trunk/src/qpkg/qpkg
+++ b/trunk/src/qpkg/qpkg
@@ -13,7 +13,9 @@
 ID='$Id$'
 VERSION=0.`echo ${ID} | cut -d\  -f3`
 
-TMP="/tmp/qpkg-${$}/"
+umask 0077
+
+TMP="$(mktemp -d -t qpkg-XXXXXX)"
 rm -rf ${TMP}
 mkdir -p ${TMP}
 
@@ -228,6 +230,7 @@ ${YL}Examples${NO}:
 			the older ones will have \"damaged\" files.
   ${PROG} -f /bin/ls	print package(s) that own /bin/ls
 "
+	rm -rf ${TMP}
 	exit
 fi
 
@@ -292,6 +295,7 @@ fi
 					-e "s:-[0-9].*$::" \
 					-e "s:\(^[^/]*/\)\(.*\):${BR}\1${CY}\2${NO}:"|uniq
 	fi
+	rm -rf ${TMP}
 	exit
 fi