1 |
|
Fri Aug 1 22:06:33 BST 2003 Colin Watson <cjwatson@debian.org> |
2 |
|
|
3 |
|
Fix vulnerability due to over-permissiveness of DEFINE directive. |
4 |
|
|
5 |
|
* src/manp.c (DEFINE_USER): New list flag. |
6 |
|
(get_def): Note that this must not return DEFINEs set in |
7 |
|
~/.manpath. |
8 |
|
(get_def_user): New function, which may return DEFINEs set in |
9 |
|
~/.manpath. |
10 |
|
(add_def): Use DEFINE or DEFINE_USER depending on context. |
11 |
|
(add_to_dirlist): Update call to add_def(). |
12 |
|
* src/manp.h (get_def_user): Add prototype. |
13 |
|
|
14 |
|
* src/man.c (main): pager and cat are safe for the user to define. |
15 |
|
(make_display_command): cat, tr, and decompressor are safe. |
16 |
|
* src/straycats.c (check_for_stray): col and decompressor are safe. |
17 |
|
* src/whatis.c (use_grep): whatis_grep_flags, |
18 |
|
apropos_regex_grep_flags, apropos_grep_flags, and grep are safe. |
19 |
|
|
20 |
Fri Aug 1 01:32:37 BST 2003 Colin Watson <cjwatson@debian.org> |
Fri Aug 1 01:32:37 BST 2003 Colin Watson <cjwatson@debian.org> |
21 |
|
|
22 |
* src/man.c (main): Minor whitespace cleanups. |
* src/man.c (main): Minor whitespace cleanups. |