$OpenBSD: patch-atk-adaptor_adaptors_application-adaptor_c,v 1.1 2012/07/07 06:59:24 jasper Exp $

From e4f3eee2e137cd34cd427875365f458c65458164 Mon Sep 17 00:00:00 2001
From: Mike Gorse <mgorse@suse.com>
Date: Thu, 21 Jun 2012 21:56:40 +0000
Subject: Use XDG_RUNTIME_DIR to hold sockets, and do not make a world-writable dir

If we use XDG_RUNTIME_DIR, then the directory should be owned by the
appropriate user, so it should not need to be world-writable. Hopefully this
won't break accessibility for administrative apps on some distro.

https://bugzilla.gnome.org/show_bug.cgi?id=678348

CVE-2012-3378

--- atk-adaptor/adaptors/application-adaptor.c.orig	Thu Jul 28 18:54:50 2011
+++ atk-adaptor/adaptors/application-adaptor.c	Thu Jul  5 22:19:14 2012
@@ -110,6 +110,8 @@ if (reply)
       const char *retval = (g_getenv ("AT_SPI_CLIENT") ?
                             "":
                             spi_global_app_data->app_bus_addr);
+      if (!retval)
+        retval = "";
       dbus_message_append_args(reply, DBUS_TYPE_STRING, &retval, DBUS_TYPE_INVALID);
     }
 
