CVSROOT: /cvs
Module name: src
Changes by: guent...@cvs.openbsd.org 2024/04/14 12:11:54
Modified files:
usr.bin/less : ch.c command.c edit.c filename.c funcs.h less.1
less.h less.hlp main.c opttbl.c
Log message:
Delete support for the LESSOPEN and LESSCLOSE environment variables
aka the "Input Preprocessor": it's been a source for multiple
security bugs in the past as everything has to deal with handling
arbitrary filenames and generally resulted in multiple TOCTOU issues.
The base system never included a default LESSOPEN setting like some
Linux distributions did, but it's a suds-filled sink full of knives
to try to use safely.
ok tb@ deraadt@ millert@
