patch - Remove RCS and SCCS auto-checkout support
authorMatthew Dillon <dillon@apollo.backplane.com>
Sat, 25 Jul 2015 02:40:41 +0000 (19:40 -0700)
committerMatthew Dillon <dillon@apollo.backplane.com>
Sat, 25 Jul 2015 02:46:29 +0000 (19:46 -0700)
commit05172c8dd418493b9dd5ea9bf9cc684f3cf2e705
tree81903d369cd48cae1d9068fd55bb6dad8549adb6
parentd564b91a797de28db051df13cd8558ab75eb111f
patch - Remove RCS and SCCS auto-checkout support

* Remove stale RCS and SCCS support which involves the patch(1) program
  constructing a system() command using filename data supplied from the
  file.  DragonFly deems this to be too dangerous, quoted or not.

Security: CVE-2015-1416
Reported-by: Xin Li, Martin Natano
usr.bin/patch/common.h
usr.bin/patch/inp.c
usr.bin/patch/patch.1