aboutsummaryrefslogtreecommitdiffstats
path: root/www/awstats
diff options
context:
space:
mode:
authorChin-San Huang <chinsan@FreeBSD.org>2009-01-09 22:50:26 +0800
committerChin-San Huang <chinsan@FreeBSD.org>2009-01-09 22:50:26 +0800
commit0164b578ed39b7a4074b8c23f5c73f7e8578e44e (patch)
treeb38ce855530a69cc407bb1fb741f65c72ad39f83 /www/awstats
parent7103f91d7ed1362d53f10c6be4faae13fdc2f48e (diff)
downloadfreebsd-ports-gnome-0164b578ed39b7a4074b8c23f5c73f7e8578e44e.tar.gz
freebsd-ports-gnome-0164b578ed39b7a4074b8c23f5c73f7e8578e44e.tar.zst
freebsd-ports-gnome-0164b578ed39b7a4074b8c23f5c73f7e8578e44e.zip
- Sync the CVE patch with upstream
Reported by: Eygene Ryabinkin <rea-fbsd@codelabs.ru>
Diffstat (limited to 'www/awstats')
-rw-r--r--www/awstats/files/patch-CVE-2008-37147
1 files changed, 5 insertions, 2 deletions
diff --git a/www/awstats/files/patch-CVE-2008-3714 b/www/awstats/files/patch-CVE-2008-3714
index 9b26e66f6afd..ad5329d1aec2 100644
--- a/www/awstats/files/patch-CVE-2008-3714
+++ b/www/awstats/files/patch-CVE-2008-3714
@@ -12,11 +12,14 @@ See also: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495432
--- wwwroot/cgi-bin/awstats.pl.old 2009-01-04 13:50:42.000000000 +0800
+++ wwwroot/cgi-bin/awstats.pl 2009-01-04 13:52:43.000000000 +0800
-@@ -7523,6 +7523,7 @@
+@@ -7521,8 +7521,9 @@
+ sub DecodeEncodedString {
+ my $stringtodecode = shift;
$stringtodecode =~ tr/\+/ /s;
- $stringtodecode =~ s/%22//g;
+- $stringtodecode =~ s/%22//g;
$stringtodecode =~ s/%([A-F0-9][A-F0-9])/pack("C", hex($1))/ieg;
+ $stringtodecode =~ s/["']//g;
++
return $stringtodecode;
}