summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorUlrich Müller <ulm@gentoo.org>2007-11-03 14:49:21 +0000
committerUlrich Müller <ulm@gentoo.org>2007-11-03 14:49:21 +0000
commit68998b483b604edc696f11d4978ae4e05d83904e (patch)
tree71285c424cd8a23f58d1a0d3af0d6e216ee0e4fe /app-editors/emacs/files
parentStable on x86, bug #195171 (diff)
downloadgentoo-2-68998b483b604edc696f11d4978ae4e05d83904e.tar.gz
gentoo-2-68998b483b604edc696f11d4978ae4e05d83904e.tar.bz2
gentoo-2-68998b483b604edc696f11d4978ae4e05d83904e.zip
Security fix for function hack-local-variables, CVE-2007-5795, bug #197958.
(Portage version: 2.1.3.16)
Diffstat (limited to 'app-editors/emacs/files')
-rw-r--r--app-editors/emacs/files/digest-emacs-22.1-r23
-rw-r--r--app-editors/emacs/files/emacs-22.1-hack-local-variables.patch13
2 files changed, 16 insertions, 0 deletions
diff --git a/app-editors/emacs/files/digest-emacs-22.1-r2 b/app-editors/emacs/files/digest-emacs-22.1-r2
new file mode 100644
index 000000000000..44943fdbcd94
--- /dev/null
+++ b/app-editors/emacs/files/digest-emacs-22.1-r2
@@ -0,0 +1,3 @@
+MD5 6949df37caec2d7a2e0eee3f1b422726 emacs-22.1.tar.gz 38172226
+RMD160 da5360871db8b1d473ff7f0b0937ee6c278c0b19 emacs-22.1.tar.gz 38172226
+SHA256 1ec43bef7127e572f92d7c3a846951cf8e263e27445c62c867035f94681c3ed0 emacs-22.1.tar.gz 38172226
diff --git a/app-editors/emacs/files/emacs-22.1-hack-local-variables.patch b/app-editors/emacs/files/emacs-22.1-hack-local-variables.patch
new file mode 100644
index 000000000000..ed73505c68a2
--- /dev/null
+++ b/app-editors/emacs/files/emacs-22.1-hack-local-variables.patch
@@ -0,0 +1,13 @@
+--- lisp/files.el 13 Oct 2007 14:09:56 -0000 1.896.2.28
++++ lisp/files.el 2 Nov 2007 11:02:12 -0000 1.896.2.29
+@@ -2764,8 +2764,8 @@
+ ;; If caller wants only the safe variables,
+ ;; install only them.
+ (dolist (elt result)
+- (unless (or (memq (car elt) unsafe-vars)
+- (memq (car elt) risky-vars))
++ (unless (or (member elt unsafe-vars)
++ (member elt risky-vars))
+ (hack-one-local-variable (car elt) (cdr elt))))
+ ;; Query, except in the case where all are known safe
+ ;; if the user wants no quuery in that case.