Bug#596630: disk full leads to xauth nulling out the Xauthority file completely instead of just failing to create entry

[Tim Connors <twc@aaocbn.aao.gov.au>]

Package: xauth
Version: 1:1.0.3-2
Severity: grave
Justification: causes non-serious data loss

If I have a non zero ~/.Xauthority file, then create a file in my home 
directory that fills the disk, and ssh in again (not closing the original X or 
ssh session so the Xauthority entries for those are still valid and have not 
been removed), something somewhere between ssh and libxcb completely empties 
~/.Xauthority (silently!  No error logged to stderr!).

Smacks of just trying to rewrite a file without using a temporary file, or not 
checking for any errors of the write() or close() before running rename(), 
doesn't it?


-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-bpo.4-686 (SMP w/1 CPU core)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages xauth depends on:
ii  libc6                       2.7-18lenny2 GNU C Library: Shared libraries
ii  libx11-6                    2:1.1.5-2    X11 client-side library
ii  libxau6                     1:1.0.3-3    X11 authorisation library
ii  libxext6                    2:1.0.4-1    X11 miscellaneous extension librar
ii  libxmuu1                    2:1.0.4-1    X11 miscellaneous micro-utility li
ii  x11-common                  1:7.3+20     X Window System (X.Org) infrastruc

xauth recommends no packages.

xauth suggests no packages.

-- no debconf information