[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [bug-patch] [PATCH] do not let a malicious patch create files above
|
From: |
Andreas Gruenbacher |
|
Subject: |
Re: [bug-patch] [PATCH] do not let a malicious patch create files above current directory |
|
Date: |
Thu, 3 Feb 2011 22:24:41 +0100 |
|
User-agent: |
KMail/1.13.5 (Linux/2.6.34.7-0.4-desktop; KDE/4.4.4; x86_64; ; ) |
Jim,
thanks for the patch and feedback.
> However, I prefer to negate the 3-term expression,
> putting the 2nd fatal call right after it, and thus
> decreasing nesting level of inner "while" loops.
this is better, I agree. I like what we have now. Pushed and put onto
ftp://alpha.gnu.org/gnu/patch/:
patch-2.6.1.109-685a.tar.gz
Thanks,
Andreas
Re: [bug-patch] [PATCH] do not let a malicious patch create files above current directory, Jim Meyering, 2011/02/01