aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat (limited to '2020/patches/0006-latex2man-use-predictable-tmp.patch')
-rw-r--r--2020/patches/0006-latex2man-use-predictable-tmp.patch46
1 files changed, 46 insertions, 0 deletions
diff --git a/2020/patches/0006-latex2man-use-predictable-tmp.patch b/2020/patches/0006-latex2man-use-predictable-tmp.patch
new file mode 100644
index 0000000..581b0be
--- /dev/null
+++ b/2020/patches/0006-latex2man-use-predictable-tmp.patch
@@ -0,0 +1,46 @@
+From 5dd262d2db90dc44097131fb8f160772aed407ad Mon Sep 17 00:00:00 2001
+From: Mikle Kolyada <zlogene@gentoo.org>
+Date: Sun, 2 Jun 2019 14:50:27 +0300
+Subject: [PATCH 6/6] latex2man: use predictable tmp
+
+https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668779
+https://bugs.gentoo.org/show_bug.cgi?id=432144
+CVE-2012-2120 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2120)
+---
+ texk/texlive/linked_scripts/latex2man/latex2man | 6 +++---
+ 1 file changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/texk/texlive/linked_scripts/latex2man/latex2man b/texk/texlive/linked_scripts/latex2man/latex2man
+index e117d337..285c19fd 100755
+--- a/texk/texlive/linked_scripts/latex2man/latex2man
++++ b/texk/texlive/linked_scripts/latex2man/latex2man
+@@ -31,8 +31,6 @@ sub date2str;
+ $VERSION = "1.29";
+ $DATE = date2str ('$Date: 2018/11/25 13:05:37 $' =~ m|(\d+/\d+/\d+)|);
+
+-$tmp = "/tmp/$CMD.$$";
+-
+ ##################################################################
+ # check option and arguments
+ ##################################################################
+@@ -153,7 +151,7 @@ $first_word = 1; # true, if the next word to be processed is the first
+ $list_nest = 0; # counts nesting of itemize/enumerate/description envrionments
+ $cur_list[0] = "";# array, indexed with list_nest, indicates kind of list:
+ # values are: 'enum' / 'descr' / 'item'
+-$item_nr[0] = 0; # array, indexed with list_nest, counts the number of \item in the
++$item_nr[0] = 0; # array, indexed with list_nest, counts the number of W\item in the
+ # list
+ $manRS = 0; # true, if for Man a .RS was given after a \item
+
+@@ -2018,6 +2016,8 @@ if ($opt_t) {
+ open (my $SRC, "<$SrcFile") || die "$CMD: Can't open file \`$SrcFile' for reading.\n";
+ if ($opt_H || $opt_T) {
+ # DestFile will be written in the postprocess
++ $tmp = `mktemp` || die;
++ chomp $tmp;
+ open (DEST, ">$tmp") || die "$CMD: Can't open file \`$tmp' for writing.\n";
+ } else {
+ open (DEST, ">$DestFile") || die "$CMD: Can't open file \`$DestFile' for writing.\n";
+--
+2.21.0
+