summaryrefslogtreecommitdiffstats
path: root/archivers/lha
diff options
context:
space:
mode:
authordinoex <dinoex@FreeBSD.org>2004-05-03 14:31:41 +0000
committerdinoex <dinoex@FreeBSD.org>2004-05-03 14:31:41 +0000
commitfda72431cd72cb95baa3e95f70cc5e0c98a24b13 (patch)
tree7e245b10de3ffaedacec21e5281d5d55f2c0aa2b /archivers/lha
parenta131ba25eca0e1a3e184b928ad016ed8aad5caea (diff)
downloadFreeBSD-ports-fda72431cd72cb95baa3e95f70cc5e0c98a24b13.zip
FreeBSD-ports-fda72431cd72cb95baa3e95f70cc5e0c98a24b13.tar.gz
- Security Fix: symlink vulnerability
patch from: ftp://updates.redhat.com/9/en/os/SRPMS/lha-1.14i-9.1.src.rpm"
Diffstat (limited to 'archivers/lha')
-rw-r--r--archivers/lha/files/patch-symlink10
1 files changed, 10 insertions, 0 deletions
diff --git a/archivers/lha/files/patch-symlink b/archivers/lha/files/patch-symlink
new file mode 100644
index 0000000..87c23b6
--- /dev/null
+++ b/archivers/lha/files/patch-symlink
@@ -0,0 +1,10 @@
+--- src/lhext.c.symlink 2000-10-04 10:57:38.000000000 -0400
++++ src/lhext.c 2003-05-19 22:55:57.000000000 -0400
+@@ -351,6 +351,7 @@ extract_one(afp, hdr)
+ }
+
+ unlink(bb1);
++ make_parent_path(bb1);
+ l_code = symlink(bb2, bb1);
+ if (l_code < 0) {
+ if (quiet != TRUE)
OpenPOWER on IntegriCloud