patch-src_global_c 525 B

1234567891011121314151617
  1. $OpenBSD: patch-src_global_c,v 1.1 2015/03/31 15:36:52 naddy Exp $
  2. CVE-2015-1197: cpio directory traversal
  3. --- src/global.c.orig Fri Feb 12 11:19:23 2010
  4. +++ src/global.c Sun Mar 29 21:11:10 2015
  5. @@ -187,6 +187,9 @@ bool to_stdout_option = false;
  6. /* The name this program was run with. */
  7. char *program_name;
  8. +/* Extract files over symbolic links */
  9. +bool extract_over_symlinks;
  10. +
  11. /* A pointer to either lstat or stat, depending on whether
  12. dereferencing of symlinks is done for input files. */
  13. int (*xstat) ();