From 0b4d22e6367433a84ea6e7c1d0217dcd00a74b66 Mon Sep 17 00:00:00 2001 From: Edd Barrett Date: Tue, 1 Jan 2019 17:08:28 +0000 Subject: [PATCH] Prevent possible leak of executable gophermap contents. --- menu.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/menu.c b/menu.c index 4f85f5f..3a660e3 100644 --- a/menu.c +++ b/menu.c @@ -311,13 +311,15 @@ int gophermap(state *st, char *mapfile, int depth) } /* Try to execute or open the mapfile */ -#ifdef HAVE_POPEN if (exe) { +#ifdef HAVE_POPEN setenv_cgi(st, mapfile); if ((fp = popen(command, "r")) == NULL) return OK; +#else + return OK; +#endif } else -#endif if ((fp = fopen(mapfile, "r")) == NULL) return OK; /* Read lines one by one */