GNU bug report logs - #59544
[PATCH] Fixed lib-src/etags.c command execute vulnerability

Previous Next

Full log

Message #46 received at 59544 <at> debbugs.gnu.org (full text, mbox):

From: lux <lx <at> shellcodes.org>
To: Stefan Kangas <stefankangas <at> gmail.com>, Eli Zaretskii <eliz <at> gnu.org>
Cc: 59544 <59544 <at> debbugs.gnu.org>
Subject: Re: bug#59544: [PATCH] Fixed lib-src/etags.c command execute
 vulnerability
Date: Sat, 26 Nov 2022 10:30:01 +0800

[Message part 1 (text/plain, inline)]

> "lux" <lx <at> shellcodes.org> writes:
>
>> +          FILE *otags_f = fopen ("OTAGS", "wb");
>> +          FILE *tag_f = fopen (tagfile, "rb");
>> +
>> +          if (otags_f == NULL)
>> +              pfatal ("OTAGS");
>                 ^^
>
> Two spurious spaces here.  Other than that, LGTM.

Fixed, thank you :-)

[0001-Fixed-lib-src-etags.c-command-execute-vulnerability.patch (text/x-patch, attachment)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.