summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDirk Meyer <dinoex@FreeBSD.org>2004-05-03 14:31:41 +0000
committerDirk Meyer <dinoex@FreeBSD.org>2004-05-03 14:31:41 +0000
commit119ec92aa3488a6946216a6408453b105e31d96a (patch)
treed3c3bb66af772e68fd90fe35f7f26647ed77649d
parent- Security Fix: two stack buffer overflows and two directory traversal flaws (diff)
- Security Fix: symlink vulnerability
patch from: ftp://updates.redhat.com/9/en/os/SRPMS/lha-1.14i-9.1.src.rpm"
-rw-r--r--archivers/lha/files/patch-symlink10
1 files changed, 10 insertions, 0 deletions
diff --git a/archivers/lha/files/patch-symlink b/archivers/lha/files/patch-symlink
new file mode 100644
index 000000000000..87c23b66cfa2
--- /dev/null
+++ b/archivers/lha/files/patch-symlink
@@ -0,0 +1,10 @@
+--- src/lhext.c.symlink 2000-10-04 10:57:38.000000000 -0400
++++ src/lhext.c 2003-05-19 22:55:57.000000000 -0400
+@@ -351,6 +351,7 @@ extract_one(afp, hdr)
+ }
+
+ unlink(bb1);
++ make_parent_path(bb1);
+ l_code = symlink(bb2, bb1);
+ if (l_code < 0) {
+ if (quiet != TRUE)