LADI
/
cadence
1
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Patch CVE-2023-43783: Use of Fixed Temporary File Path in /tmp/cadence-wineasio.reg 

Apply SuSE fix for CVE-2023-43783 (by Matthias Gerstner)

0001-cadence.py-wine-ASIO-settings-use-safe-tempfile.patch

https://bugzilla.suse.com/show_bug.cgi?id=1213985
This commit is contained in:
Nedko Arnaudov 2024-01-07 17:00:37 +02:00
parent 5099c9152b
commit 6518bcd21b
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/cadence.py
View File

@ -47,6 +47,8 @@ from shared_settings import *
# Import getoutput
from subprocess import getoutput
import tempfile
import subprocess
# ------------------------------------------------------------------------------------------------------------
# Try Import DBus
@ -2095,11 +2097,10 @@ class CadenceMainW(QMainWindow, ui_cadence.Ui_CadenceMainW):
REGFILE += '"Number of outputs"=dword:000000%s\n' % smartHex(self.sb_wineasio_outs.value(), 2)
REGFILE += '"Preferred buffersize"=dword:0000%s\n' % smartHex(int(self.cb_wineasio_bsizes.currentText()), 4)
writeFile = open("/tmp/cadence-wineasio.reg", "w")
writeFile.write(REGFILE)
writeFile.close()
os.system("regedit /tmp/cadence-wineasio.reg")
with tempfile.NamedTemporaryFile('w') as tmpfile:
tmpfile.write(REGFILE)
tmpfile.flush()
subprocess.run(["regedit", tmpfile.name])
self.settings_changed_types = []
self.frame_tweaks_settings.setVisible(False)