[comp.bugs.4bsd] TIOCSPGRP security checks are insufficient

chris@mimsy.UUCP (Chris Torek) (11/08/88)

Index: /sys/sys/tty.c 4.3BSD,4.3BSD-tahoe Fix

Description:
	The security checking in TIOCSPGRP is insufficient to do
	what it was designed to do (which is not really all that
	much anyway).

Repeat-by:
	Examination.

Fix:

RCS file: RCS/tty.c,v
retrieving revision 1.11
diff -c2 -r1.11 tty.c
*** /tmp/,RCSt1007903	Mon Nov  7 23:52:18 1988
--- tty.c	Mon Nov  7 23:52:03 1988
***************
*** 487,491 ****
  	case TIOCSPGRP: {
  		struct proc *p;
! 		int pgrp = *(int *)data;
  
  		if (u.u_uid && (flag & FREAD) == 0)
--- 487,491 ----
  	case TIOCSPGRP: {
  		struct proc *p;
! 		short pgrp = *(int *)data;
  
  		if (u.u_uid && (flag & FREAD) == 0)
-- 
In-Real-Life: Chris Torek, Univ of MD Comp Sci Dept (+1 301 454 7163)
Domain:	chris@mimsy.umd.edu	Path:	uunet!mimsy!chris