deri pushed a commit to branch master
in repository groff.
commit 2fc912f0751320a1fba0094dded38e2df46d1dbe
Author: Deri James <d...@chuzzlewit.myzen.co.uk>
Date: Sat Sep 21 15:52:54 2019 +0100
Prevent gropdf executing arbitrary commands
* src/devices/gropdf/gropdf.pl: See bug #55557
---
src/devices/gropdf/gropdf.pl | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/devices/gropdf/gropdf.pl b/src/devices/gropdf/gropdf.pl
index 2ec52d0..cfe5a93 100644
--- a/src/devices/gropdf/gropdf.pl
+++ b/src/devices/gropdf/gropdf.pl
@@ -287,6 +287,7 @@ my %info=('Creator' => "(groff version
$cfg{GROFF_VERSION})",
'Producer' => "(gropdf version
$cfg{GROFF_VERSION})",
'ModDate' => "($dt)",
'CreationDate' => "($dt)");
+map { $_="< ".$_."\0" } @ARGV;
while (<>)
{
_______________________________________________
Groff-commit mailing list
Groff-commit@gnu.org
https://lists.gnu.org/mailman/listinfo/groff-commit
