From 6892a732276a80a648d3e4914ecf9852ab523632 Mon Sep 17 00:00:00 2001
From: Gerard Beekmans <gerard@linuxfromscratch.org>
Date: Thu, 9 Aug 2001 01:05:51 +0000
Subject: Fixed ed symlink vulnerability

git-svn-id: http://svn.linuxfromscratch.org/LFS/trunk/BOOK@949 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
---
 chapter06/ed-exp.xml  | 7 +++++++
 chapter06/ed-inst.xml | 7 ++++++-
 chapter06/ed.xml      | 1 +
 index.xml             | 1 +
 4 files changed, 15 insertions(+), 1 deletion(-)
 create mode 100644 chapter06/ed-exp.xml

diff --git a/chapter06/ed-exp.xml b/chapter06/ed-exp.xml
new file mode 100644
index 000000000..345ae6510
--- /dev/null
+++ b/chapter06/ed-exp.xml
@@ -0,0 +1,7 @@
+<sect2>
+<title>Command explanations</title>
+
+<para><userinput>Insert proper symlink bug explanation here.</para>
+
+</sect2>
+
diff --git a/chapter06/ed-inst.xml b/chapter06/ed-inst.xml
index 4e896a9cc..ced1cb48d 100644
--- a/chapter06/ed-inst.xml
+++ b/chapter06/ed-inst.xml
@@ -3,7 +3,12 @@
 
 <para>Install Ed by running the following commands:</para>
 
-<para><screen><userinput>./configure --prefix=/usr &amp;&amp;</userinput>
+<para><screen><userinput>cp buf.c buf.c-backup &amp;&amp;</userinput>
+<userinput>sed 's/int u/int u, sfd/' buf.c-temp | \</userinput>
+<userinput>&nbsp;&nbsp;&nbsp;sed '/.*\*mktemp.*/d' | \</userinput>
+<userinput>&nbsp;&nbsp;&nbsp;sed 's/.*if (mktemp.*/  sfd = mkstemp(sfn);\</userinput>
+<userinput>&nbsp;&nbsp;&nbsp;if ((sfd == -1) || (sfp = fopen (sfn, "w+")) == NULL)/' &gt; buf.c</userinput>
+<userinput>./configure --prefix=/usr &amp;&amp;</userinput>
 <userinput>make &amp;&amp;</userinput>
 <userinput>make install &amp;&amp;</userinput>
 <userinput>mv /usr/bin/ed /usr/bin/red /bin</userinput></screen></para>
diff --git a/chapter06/ed.xml b/chapter06/ed.xml
index ede6fc9f6..ff04effc9 100644
--- a/chapter06/ed.xml
+++ b/chapter06/ed.xml
@@ -5,6 +5,7 @@
 Estimated disk space required:  &ed-compsize;</screen>
 
 &c6-ed-inst;
+&c6-ed-exp;
 &aa-ed-desc;
 
 </sect1>
diff --git a/index.xml b/index.xml
index 4f15d5012..38fd4043f 100644
--- a/index.xml
+++ b/index.xml
@@ -199,6 +199,7 @@
 <!ENTITY c6-makedev-exp SYSTEM "chapter6/makedev-exp.xml">
 <!ENTITY c6-ed SYSTEM "chapter6/ed.xml">
 <!ENTITY c6-ed-inst SYSTEM "chapter6/ed-inst.xml">
+<!ENTITY c6-ed-exp SYSTEM "chapter6/ed-exp.xml">
 <!ENTITY c6-patch SYSTEM "chapter6/patch.xml">
 <!ENTITY c6-patch-inst SYSTEM "chapter6/patch-inst.xml">
 <!ENTITY c6-gcc SYSTEM "chapter6/gcc.xml">
-- 
cgit v1.2.3-54-g00ecf