projects / emacs.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5d05ea8) | patch
Fix etags local command injection vulnerability
authorlu4nx <lx@shellcodes.org>
Tue, 6 Dec 2022 07:42:40 +0000 (15:42 +0800)
committerStefan Kangas <stefankangas@gmail.com>
Fri, 17 Feb 2023 10:20:42 +0000 (11:20 +0100)
commite339926272a598bd9ee7e02989c1662b89e64cf0
tree172f763898261a7100a95d327e7e19cbf9afc7cbtree | snapshot
parent5d05ea803e9996c4c1edbe0fa0f6f5b05d2ffc87commit | diff
Fix etags local command injection vulnerability

* lib-src/etags.c: (escape_shell_arg_string): New function.
(process_file_name): Use it to quote file names passed to the
shell.  (Bug#59817)

(cherry picked from commit 01a4035c869b91c153af9a9132c87adb7669ea1c)
lib-src/etags.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.