git: patch - Remove RCS and SCCS auto-checkout support

Matthew Dillon dillon at crater.dragonflybsd.org
Fri Jul 24 19:46:34 PDT 2015


commit 05172c8dd418493b9dd5ea9bf9cc684f3cf2e705
Author: Matthew Dillon <dillon at apollo.backplane.com>
Date:   Fri Jul 24 19:40:41 2015 -0700

    patch - Remove RCS and SCCS auto-checkout support
    
    * Remove stale RCS and SCCS support which involves the patch(1) program
      constructing a system() command using filename data supplied from the
      file.  DragonFly deems this to be too dangerous, quoted or not.
    
    Security: CVE-2015-1416
    Reported-by: Xin Li, Martin Natano

Summary of changes:
 usr.bin/patch/common.h |  2 --
 usr.bin/patch/inp.c    | 74 +++++---------------------------------------------
 usr.bin/patch/patch.1  | 10 ++-----
 3 files changed, 10 insertions(+), 76 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/05172c8dd418493b9dd5ea9bf9cc684f3cf2e705


-- 
DragonFly BSD source repository



More information about the Commits mailing list