artulab
projects / openbsd / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fde894e) | patch
Use glob() to expand filenames instead of passing it to the shell's
authormillert <millert@openbsd.org>
Tue, 16 Dec 2014 18:31:06 +0000 (18:31 +0000)
committermillert <millert@openbsd.org>
Tue, 16 Dec 2014 18:31:06 +0000 (18:31 +0000)
commit32cc11aa10796d2c7ed995a53c31ff376a707aa9
treee1d296d5d70fa7cd3f187bc448bd263a9d5ce828tree | snapshot
parentfde894e58bbff915860f72b4c0bd0bc7cb508668commit | diff
Use glob() to expand filenames instead of passing it to the shell's
echo command for expansion which could result in arbitrary command
execution.  CVE-2004-2771
usr.bin/mail/fio.c diff | blob | history
OpenBSD src
by Ahmet Artu Yildirim