projects / freebsd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3fae667) | patch
Ensure that we always open only files that is named by explicitly
authordelphij <delphij@FreeBSD.org>
Tue, 6 Sep 2016 08:52:00 +0000 (08:52 +0000)
committerdelphij <delphij@FreeBSD.org>
Tue, 6 Sep 2016 08:52:00 +0000 (08:52 +0000)
commit69ca030985f52cae1ac386704a2b93ea6e98257e
treea03e6acd87e4df9bbccb78e08feb8b64aaf9ed98tree | snapshot
parent3fae667bdc65695e3b8ff22b034f6cfbfdf2e0e3commit | diff
Ensure that we always open only files that is named by explicitly
using shell redirections instead of having gzip(1) to decide what
file to open.

Issue reported in the "non-cryptanalytic attacks against freebsd
update components" anonymous gist.

Reviewed by: allanjude, emaste
MFC after: 3 days
Differential Revision: https://reviews.freebsd.org/D7653
usr.sbin/portsnap/portsnap/portsnap.sh diff | blob | blame | history
FreeBSD Project Source