diff options
author | Ruediger Pluem <rpluem@apache.org> | 2017-07-03 06:37:45 +0000 |
---|---|---|
committer | Ruediger Pluem <rpluem@apache.org> | 2017-07-03 06:37:45 +0000 |
commit | f5c249ba91c22ec580fd16f4e71b68e7c57c5e1c (patch) | |
tree | 60660da4fdb22030efae94e96eb5f63a518305bf /support | |
parent | 49d653a53a5f627f5a080613c8e385b18e4d1ceb (diff) | |
download | httpd-f5c249ba91c22ec580fd16f4e71b68e7c57c5e1c.tar.gz |
* Do not apply the strict permissions of the temporary file to a possibly
existing passwd file.
This long standing bug was triggered by fixing a bug in APR in r1791029.
PR: 61240
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1800594 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'support')
-rw-r--r-- | support/htdigest.c | 2 | ||||
-rw-r--r-- | support/htpasswd.c | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/support/htdigest.c b/support/htdigest.c index 972fa82d20..018c0ea200 100644 --- a/support/htdigest.c +++ b/support/htdigest.c @@ -282,7 +282,7 @@ int main(int argc, const char * const argv[]) /* The temporary file has all the data, just copy it to the new location. */ - if (apr_file_copy(dirname, argv[1], APR_FILE_SOURCE_PERMS, cntxt) != + if (apr_file_copy(dirname, argv[1], APR_OS_DEFAULT, cntxt) != APR_SUCCESS) { apr_file_printf(errfile, "%s: unable to update file %s\n", argv[0], argv[1]); diff --git a/support/htpasswd.c b/support/htpasswd.c index e627f8b9bf..65a0b9c3bb 100644 --- a/support/htpasswd.c +++ b/support/htpasswd.c @@ -503,7 +503,7 @@ int main(int argc, const char * const argv[]) /* The temporary file has all the data, just copy it to the new location. */ - if (apr_file_copy(dirname, pwfilename, APR_FILE_SOURCE_PERMS, pool) != + if (apr_file_copy(dirname, pwfilename, APR_OS_DEFAULT, pool) != APR_SUCCESS) { apr_file_printf(errfile, "%s: unable to update file %s" NL, argv[0], pwfilename); |