1 |
|
Wed Jul 30 20:38:40 BST 2003 Colin Watson <cjwatson@debian.org> |
2 |
|
|
3 |
|
Fix vulnerabilities 2 and 3 posted by Vade 79 |
4 |
|
<v9@fakehalo.deadpig.org> on BugTraq, Message-ID: |
5 |
|
<20030729210308.15518.qmail@www.securityfocus.com>. |
6 |
|
|
7 |
|
* src/ult_src.c (ult_softlink): Return a newly allocated string |
8 |
|
rather than copying into fullpath. |
9 |
|
(test_for_include): Return a newly allocated string rather than |
10 |
|
copying into rel (which was a pointer into part of basename in |
11 |
|
ult_src(), and wasn't reallocated in the event that the .so text |
12 |
|
was too large). |
13 |
|
(ult_src): Allocate basename dynamically rather than using a |
14 |
|
static buffer. relative is no longer needed. Update for changes in |
15 |
|
ult_softlink() and test_for_include(). |
16 |
|
|
17 |
Wed Jul 30 12:33:25 BST 2003 Colin Watson <cjwatson@debian.org> |
Wed Jul 30 12:33:25 BST 2003 Colin Watson <cjwatson@debian.org> |
18 |
|
|
19 |
* src/man.c (close_cat_stream): The unlink(tmp_cat_file) cleanup is |
* src/man.c (close_cat_stream): The unlink(tmp_cat_file) cleanup is |