|
|
@@ -1,27 +0,0 @@
|
|
|
-from mc-4.6.0-7.9.src.rpm mentioned in RHSA-2004:034-01
|
|
|
-http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-1023
|
|
|
- Stack-based buffer overflow in vfs_s_resolve_symlink of
|
|
|
- vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier,
|
|
|
- and possibly later versions, allows remote attackers to execute
|
|
|
- arbitrary code during symlink conversion.
|
|
|
-
|
|
|
-diff -ru mc-4.5.55/vfs/direntry.c mc-4.5.55.new/vfs/direntry.c
|
|
|
---- vfs/direntry.c.orig 2001-08-16 15:23:05.000000000 -0700
|
|
|
-+++ vfs/direntry.c 2004-01-06 16:36:00.000000000 -0800
|
|
|
-@@ -374,6 +374,7 @@
|
|
|
- }
|
|
|
- }
|
|
|
-
|
|
|
-+#if 0
|
|
|
- /* Convert absolute paths to relative ones */
|
|
|
- if (*linkname == PATH_SEP) {
|
|
|
- char *p, *q;
|
|
|
-@@ -391,6 +392,7 @@
|
|
|
- }
|
|
|
- linkname = buf;
|
|
|
- }
|
|
|
-+#endif
|
|
|
-
|
|
|
- return (MEDATA->find_entry) (me, entry->dir, linkname, follow - 1, 0);
|
|
|
- }
|
|
|
-
|