aniani/gophernicus
1
0
Fork 0
mirror of https://github.com/gophernicus/gophernicus.git synced 2025-02-02 15:08:00 -05:00
Code

Prevent possible leak of executable gophermap contents.

Browse Source
This commit is contained in:
Edd Barrett 2019-01-01 17:08:28 +00:00
parent f56ae187ef
commit 0b4d22e636
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
menu.c
View File

@ -311,13 +311,15 @@ int gophermap(state *st, char *mapfile, int depth)
}
/* Try to execute or open the mapfile */
#ifdef HAVE_POPEN
if (exe) {
#ifdef HAVE_POPEN
setenv_cgi(st, mapfile);
if ((fp = popen(command, "r")) == NULL) return OK;
#else
return OK;
#endif
}
else
#endif
if ((fp = fopen(mapfile, "r")) == NULL) return OK;
/* Read lines one by one */