/[man-db]/man-db/docs/ChangeLog
ViewVC logotype

Diff of /man-db/docs/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 1.347 by cjwatson, Fri Aug 1 00:33:40 2003 UTC revision 1.348 by cjwatson, Fri Aug 1 21:07:39 2003 UTC
# Line 1  Line 1 
1    Fri Aug  1 22:06:33 BST 2003  Colin Watson  <cjwatson@debian.org>
2    
3            Fix vulnerability due to over-permissiveness of DEFINE directive.
4    
5            * src/manp.c (DEFINE_USER): New list flag.
6              (get_def): Note that this must not return DEFINEs set in
7              ~/.manpath.
8              (get_def_user): New function, which may return DEFINEs set in
9              ~/.manpath.
10              (add_def): Use DEFINE or DEFINE_USER depending on context.
11              (add_to_dirlist): Update call to add_def().
12            * src/manp.h (get_def_user): Add prototype.
13    
14            * src/man.c (main): pager and cat are safe for the user to define.
15              (make_display_command): cat, tr, and decompressor are safe.
16            * src/straycats.c (check_for_stray): col and decompressor are safe.
17            * src/whatis.c (use_grep): whatis_grep_flags,
18              apropos_regex_grep_flags, apropos_grep_flags, and grep are safe.
19    
20  Fri Aug  1 01:32:37 BST 2003  Colin Watson  <cjwatson@debian.org>  Fri Aug  1 01:32:37 BST 2003  Colin Watson  <cjwatson@debian.org>
21    
22          * src/man.c (main): Minor whitespace cleanups.          * src/man.c (main): Minor whitespace cleanups.

Legend:
Removed from v.1.347  
changed lines
  Added in v.1.348

savannah-hackers-public@gnu.org
ViewVC Help
Powered by ViewVC 1.1.26