diff options
author | steve <steve@FreeBSD.org> | 1998-08-09 08:10:45 +0800 |
---|---|---|
committer | steve <steve@FreeBSD.org> | 1998-08-09 08:10:45 +0800 |
commit | c252ddc5179eeacf328586d54152e79d531edb1d (patch) | |
tree | 019b33204724d18abf43ed3d8b99b0a6f20891c2 /www | |
parent | f7d866ef2c1b415270fdada35278d34459ff6fba (diff) | |
download | freebsd-ports-gnome-c252ddc5179eeacf328586d54152e79d531edb1d.tar.gz freebsd-ports-gnome-c252ddc5179eeacf328586d54152e79d531edb1d.tar.zst freebsd-ports-gnome-c252ddc5179eeacf328586d54152e79d531edb1d.zip |
Patch a potential buffer overflow from DFN-CERT#34784.
PR: 6851
Submitted by: David Kelly <dkelly@nebula.tbe.com>
Diffstat (limited to 'www')
-rw-r--r-- | www/w3c-httpd/files/patch-ca | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/www/w3c-httpd/files/patch-ca b/www/w3c-httpd/files/patch-ca new file mode 100644 index 000000000000..110d585868e2 --- /dev/null +++ b/www/w3c-httpd/files/patch-ca @@ -0,0 +1,12 @@ +--- Daemon/Implementation/CGIParse.c.orig Wed Jun 3 12:38:15 1998 ++++ Daemon/Implementation/CGIParse.c Wed Jun 3 12:38:41 1998 +@@ -293,7 +293,8 @@ + *cur = 0; + + if (init) { +- printf("QUERY_STRING='%s'; export QUERY_STRING\n", query_string); ++ printf("QUERY_STRING='%s'; export QUERY_STRING\n", ++ sh_escape(query_string) ); + exit(0); + } + } |