Ticket #734: nALFS-1.2.0.patch

src/handlers/stage.c

@@ -113 +113 @@
         }
 
         /* getpwnam() is failing in chroot() */
-        while ((pw = fgetpwent(fp))) {
+        while ((pw = getpwent())) {
                 if (strcmp(pw->pw_name, user) == 0) {
                         break;
                 }

src/handlers/su.c

@@ -108 +108 @@
         }
 
         /* getpwnam() is failing in chroot() */
-        while ((pw = fgetpwent(fp))) {
+        while ((pw = getpwent())) {
                 if (strcmp(pw->pw_name, user) == 0) {
                         break;
                 }

src/lib/get_url.c

@@ -48 +48 @@
         int command_status;
         struct stat stat_buf;
         char *temp_file_name;
-            
+    const char *template_file = ".nALFS.XXXXXX";
+    char *buffer = xstrdup(destination);
+    int temp_file_size = strlen(dirname(buffer)) + 1 + strlen(template_file) + 1; // 1 for / and one for '\0'
 
         /* Construct a temporary filename */
 
-        temp_file_name = xstrdup(".nALFS.XXXXXX");
+    temp_file_name = xmalloc(temp_file_size);
+    strcat(strcat(strcpy(temp_file_name, buffer), "/"), template_file);
         if (create_temp_file(temp_file_name))
                 goto free_all_and_return;
         /* There is a small risk that another user could create a symlink
@@ -103 +106 @@
         status = 0;
 
  free_all_and_return:
+    xfree(buffer);
         xfree(temp_file_name);
 
         return status;