polkit/CVE-2021-3560.patch
Jan Rybar c23564feee CVE-2021-3560 mitigation
Resolves: CVE-2021-3560
2021-06-28 20:55:50 +02:00

14 lines
412 B
Diff

--- a/src/polkit/polkitsystembusname.c
+++ b/src/polkit/polkitsystembusname.c
@@ -435,6 +435,9 @@ polkit_system_bus_name_get_creds_sync (PolkitSystemBusName *system_bus
while (!((data.retrieved_uid && data.retrieved_pid) || data.caught_error))
g_main_context_iteration (tmp_context, TRUE);
+ if (data.caught_error)
+ goto out;
+
if (out_uid)
*out_uid = data.uid;
if (out_pid)