security fix for 'm4 -F'

Eric Blake <[email protected]>
Newsgroups gmane.comp.gnu.m4.patches
Message-ID <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

$ m4 -F /nosuch/%x </dev/null
m4: /nosuch/0: No such file or directory

If that doesn't scare you, consider a file name that contains %n.  This
security hole has been present since M4 1.3.

- --
Don't work too hard, make some time for fun as well!

Eric Blake             [email protected]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Cygwin)
Comment: Public key at home.comcast.net/~ericblake/eblake.gpg
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHRZSD84KuGfSFAYARAtbhAJ9RkobPIl+RJdEtyqzpwKEH4nRsKwCfYtPq
5cmlMyNjTD74r1SLOj2K70Q=
=7vgH
-----END PGP SIGNATURE-----

_______________________________________________
M4-patches mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/m4-patches
m4.patch294 (text/plain, 0 B)

    
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.