Bug#679966: Possible security issues and a temporary fix

2012-07-11 Thread Zoltan Hidvegi
More info: this is not an upstream issue, it's caused by the handle-removed-working-dir.patch which is an attempt to fix #667038. Besides chopping off the last path component of any cd ../name command, it also does sfprintf(shp-strbuf,oldpwd) which is a problem if oldpwd contains printf formatting

Bug#679966: Possible security issues and a temporary fix

2012-07-11 Thread Oliver Kiddle
Zoltan Hidvegi wrote: More info: this is not an upstream issue, it's caused by the handle-removed-working-dir.patch which is an attempt to fix #667038. Besides chopping off the last path component of any cd ../name command, it also does sfprintf(shp-strbuf,oldpwd) which is a problem if oldpwd