severity 425300 normal
thanks

* Jindrich Makovicka [Sun, 20 May 2007 21:09:04 +0200]:

> Amuleweb does not check if a requested image actually exists. This
> means requests like http://localhost:4711/xyzzy.png (but only if the
> user is logged in) crash the webserver due to a NULL pointer
> dereference.

Okay, but I'm adjusting the severity of this bug, given that (a) user
must be logged in, and (b) a wrong URL must be provided by hand, which
makes it not happen in the common case.

> Fix attached.

Does this fix come from upstream?

Cheers,

-- 
Adeodato Simó                                     dato at net.com.org.es
Debian Developer                                  adeodato at debian.org
 
Man is certainly stark mad; he cannot make a flea, yet he makes gods by the
dozens.
                -- Michel de Montaigne



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to