On Sun, 26 Jul 2015 08:32:19 -0600, "Todd C. Miller" wrote:

> CVSROOT:      /cvs
> Module name:  src
> Changes by:   mill...@cvs.openbsd.org 2015/07/26 08:32:19
> 
> Modified files:
>       usr.bin/patch  : common.h inp.c patch.1 pch.c util.c util.h 
> 
> Log message:
> Remove support for automatically checking files out of RCS.  The
> behavior is confusing to users and even GNU patch no longer does
> it by default.  OK krw@ guenther@

This diff was in response to a problem reported by Martin Natano
where patch(1) could be tricked into running arbitrary shell code
with a specially crafted diff.

 - todd

Reply via email to