From 83c1e8c44a4811599b75e05486330980a397d74e Mon Sep 17 00:00:00 2001 From: Greg Lewis Date: Thu, 12 May 2005 04:14:52 +0000 Subject: . Ensure that when files are extracted that their fully resolved path lies in or below the current working directory. Fixes a security problem with jar(1). This fix may change to be compatible with whatever fix Sun applies when they release the next version of 1.5. . Bump PORTREVISION for this fix. Security: http://vuxml.FreeBSD.org/18e5428f-ae7c-11d9-837d-000e0c2e438a.html Reviewed by: maintainer timeout --- java/jdk15/files/patch-j2se-resources-jar.properties | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 java/jdk15/files/patch-j2se-resources-jar.properties (limited to 'java/jdk15/files/patch-j2se-resources-jar.properties') diff --git a/java/jdk15/files/patch-j2se-resources-jar.properties b/java/jdk15/files/patch-j2se-resources-jar.properties new file mode 100644 index 000000000000..9f28eb7c045a --- /dev/null +++ b/java/jdk15/files/patch-j2se-resources-jar.properties @@ -0,0 +1,13 @@ +$FreeBSD$ + +--- ../../j2se/src/share/classes/sun/tools/jar/resources/jar.properties 8 Nov 2004 22:27:32 -0000 1.1.1.1 ++++ ../../j2se/src/share/classes/sun/tools/jar/resources/jar.properties 20 Apr 2005 15:50:41 -0000 +@@ -30,6 +30,8 @@ + {0} : could not create directory + error.incorrect.length=\ + incorrect length while processing: {0} ++error.no.cwd=\ ++ {0} : could not determine current working directory + out.added.manifest=\ + added manifest + out.update.manifest=\ -- cgit v1.2.3