<short summary of the patch>
authorCamm Maguire <camm@debian.org>
Sun, 13 Nov 2022 12:55:14 +0000 (12:55 +0000)
committerCamm Maguire <camm@debian.org>
Sun, 13 Nov 2022 12:55:14 +0000 (12:55 +0000)
Bug-Debian: https://bugs.debian.org/802203

TODO: Put a short summary on the line above and replace this paragraph
with a longer explanation of this change. Complete the meta-information
with other relevant fields (see below for details). To make it easier, the
information below has been extracted from the changelog. Adjust it or drop
it.

gcl (2.6.12-40) unstable; urgency=medium

  * pathnames1.2
  * Bug fix: "popen arguments not quoted causes trouble and security
    issues", thanks to axel (Closes: #802203).

Gbp-Pq: Name pathnames1.3

o/unixfsys.c

index 3c47a0f47be244e907dfbfdfa1f3d3033e24daa8..9dcac652ac397e795be856e0e691f8d0676394d2 100755 (executable)
@@ -83,7 +83,7 @@ DEFUN_NEW("UID-TO-NAME",object,fSuid_to_name,SI,1,1,NONE,OI,OO,OO,OO,(fixnum uid
   long r;
 
   massert((r=sysconf(_SC_GETPW_R_SIZE_MAX))>=0);
-  massert(r<sizeof(FN1));
+  massert(r<=sizeof(FN1));/*FIXME maybe once at image startup*/
 
   massert(!getpwuid_r(uid,&pw,FN1,r,&pwent));
 
@@ -97,7 +97,7 @@ DEFUN_NEW("HOME-NAMESTRING",object,fShome_namestring,SI,1,1,NONE,OO,OO,OO,OO,(ob
   long r;
 
   massert((r=sysconf(_SC_GETPW_R_SIZE_MAX))>=0);
-  massert(r<sizeof(FN1));
+  massert(r<=sizeof(FN1));/*FIXME maybe once at image startup*/
 
   if (nm->st.st_fillp==1)