[src/netbsd-2-0]: src/dist/ntp/ntpd Pull up following revision(s) (requested ...

[tron <tron%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/85ef3bb0716c
branches:  netbsd-2-0
changeset: 564899:85ef3bb0716c
user:      tron <tron%NetBSD.org@localhost>
date:      Mon Oct 31 20:53:42 2005 +0000

description:
Pull up following revision(s) (requested by dan in ticket #5958):
        dist/ntp/ntpd/ntpd.c: revision 1.8
Use group-id from ``gr'' and not ``pw''.
Fixes security issue addressed by CAN-2005-2496.
Thanks to Adrian Portelli for notifying me about this.

diffstat:

 dist/ntp/ntpd/ntpd.c |  4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diffs (18 lines):

diff -r 5caa5b6c1c4e -r 85ef3bb0716c dist/ntp/ntpd/ntpd.c
--- a/dist/ntp/ntpd/ntpd.c      Mon Oct 31 20:53:02 2005 +0000
+++ b/dist/ntp/ntpd/ntpd.c      Mon Oct 31 20:53:42 2005 +0000
@@ -1,4 +1,4 @@
-/*     $NetBSD: ntpd.c,v 1.5 2003/12/04 16:23:37 drochner Exp $        */
+/*     $NetBSD: ntpd.c,v 1.5.2.1 2005/10/31 20:53:42 tron Exp $        */
 
 /*
  * ntpd.c - main program for the fixed point NTP daemon
@@ -865,7 +865,7 @@
                } else {
 getgroup:      
                        if ((gr = getgrnam(group)) != NULL) {
-                               sw_gid = pw->pw_gid;
+                               sw_gid = gr->gr_gid;
                        } else {
                                errno = 0;
                                msyslog(LOG_ERR, "Cannot find group `%s'", group);