GNU bug report logs - #59544
[PATCH] Fixed lib-src/etags.c command execute vulnerability

Previous Next

Package: emacs;

Reported by: "lux" <lx <at> shellcodes.org>

Date: Thu, 24 Nov 2022 15:28:02 UTC

Severity: normal

Tags: patch, security

Done: Eli Zaretskii <eliz <at> gnu.org>

Bug is archived. No further changes may be made.

Full log

Message #43 received at 59544 <at> debbugs.gnu.org (full text, mbox):

From: Stefan Kangas <stefankangas <at> gmail.com>
To: lux <lx <at> shellcodes.org>, Eli Zaretskii <eliz <at> gnu.org>
Cc: 59544 <59544 <at> debbugs.gnu.org>
Subject: Re: bug#59544: [PATCH] Fixed lib-src/etags.c command execute
 vulnerability
Date: Fri, 25 Nov 2022 16:43:40 -0800

"lux" <lx <at> shellcodes.org> writes:

> +          FILE *otags_f = fopen ("OTAGS", "wb");
> +          FILE *tag_f = fopen (tagfile, "rb");
> +
> +          if (otags_f == NULL)
> +              pfatal ("OTAGS");
               ^^

Two spurious spaces here.  Other than that, LGTM.
This bug report was last modified 2 years and 129 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.