aboutsummaryrefslogtreecommitdiffstats
path: root/www
diff options
context:
space:
mode:
authorsteve <steve@FreeBSD.org>1998-08-09 08:10:45 +0800
committersteve <steve@FreeBSD.org>1998-08-09 08:10:45 +0800
commitc252ddc5179eeacf328586d54152e79d531edb1d (patch)
tree019b33204724d18abf43ed3d8b99b0a6f20891c2 /www
parentf7d866ef2c1b415270fdada35278d34459ff6fba (diff)
downloadfreebsd-ports-gnome-c252ddc5179eeacf328586d54152e79d531edb1d.tar.gz
freebsd-ports-gnome-c252ddc5179eeacf328586d54152e79d531edb1d.tar.zst
freebsd-ports-gnome-c252ddc5179eeacf328586d54152e79d531edb1d.zip
Patch a potential buffer overflow from DFN-CERT#34784.
PR: 6851 Submitted by: David Kelly <dkelly@nebula.tbe.com>
Diffstat (limited to 'www')
-rw-r--r--www/w3c-httpd/files/patch-ca12
1 files changed, 12 insertions, 0 deletions
diff --git a/www/w3c-httpd/files/patch-ca b/www/w3c-httpd/files/patch-ca
new file mode 100644
index 000000000000..110d585868e2
--- /dev/null
+++ b/www/w3c-httpd/files/patch-ca
@@ -0,0 +1,12 @@
+--- Daemon/Implementation/CGIParse.c.orig Wed Jun 3 12:38:15 1998
++++ Daemon/Implementation/CGIParse.c Wed Jun 3 12:38:41 1998
+@@ -293,7 +293,8 @@
+ *cur = 0;
+
+ if (init) {
+- printf("QUERY_STRING='%s'; export QUERY_STRING\n", query_string);
++ printf("QUERY_STRING='%s'; export QUERY_STRING\n",
++ sh_escape(query_string) );
+ exit(0);
+ }
+ }