Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-15-SP7:Update
mailx.35857
0004-globname-Invoke-wordexp-with-WRDE_NOCMD-CV...
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File 0004-globname-Invoke-wordexp-with-WRDE_NOCMD-CVE-2004-277.patch of Package mailx.35857
From 73fefa0c1ac70043ec84f2d8b8f9f683213f168d Mon Sep 17 00:00:00 2001 From: Florian Weimer <fweimer@redhat.com> Date: Mon, 17 Nov 2014 13:11:32 +0100 Subject: [PATCH 4/4] globname: Invoke wordexp with WRDE_NOCMD (CVE-2004-2771) --- fio.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fio.c b/fio.c index 1529236..774a204 100644 --- a/fio.c +++ b/fio.c @@ -497,7 +497,7 @@ globname(char *name) sigemptyset(&nset); sigaddset(&nset, SIGCHLD); sigprocmask(SIG_BLOCK, &nset, NULL); - i = wordexp(name, &we, 0); + i = wordexp(name, &we, WRDE_NOCMD); sigprocmask(SIG_UNBLOCK, &nset, NULL); switch (i) { case 0: -- 1.9.3
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
