From 0b4d22e6367433a84ea6e7c1d0217dcd00a74b66 Mon Sep 17 00:00:00 2001 From: Edd Barrett Date: Tue, 1 Jan 2019 17:08:28 +0000 Subject: [PATCH 1/2] Prevent possible leak of executable gophermap contents. --- menu.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/menu.c b/menu.c index 4f85f5f..3a660e3 100644 --- a/menu.c +++ b/menu.c @@ -311,13 +311,15 @@ int gophermap(state *st, char *mapfile, int depth) } /* Try to execute or open the mapfile */ -#ifdef HAVE_POPEN if (exe) { +#ifdef HAVE_POPEN setenv_cgi(st, mapfile); if ((fp = popen(command, "r")) == NULL) return OK; +#else + return OK; +#endif } else -#endif if ((fp = fopen(mapfile, "r")) == NULL) return OK; /* Read lines one by one */ From 6409565c782181211e5059a4e2167751e0a6fe97 Mon Sep 17 00:00:00 2001 From: Edd Barrett Date: Mon, 4 Mar 2019 21:37:10 +0000 Subject: [PATCH 2/2] Fix indent. --- menu.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/menu.c b/menu.c index 3a660e3..6466771 100644 --- a/menu.c +++ b/menu.c @@ -316,7 +316,7 @@ int gophermap(state *st, char *mapfile, int depth) setenv_cgi(st, mapfile); if ((fp = popen(command, "r")) == NULL) return OK; #else - return OK; + return OK; #endif } else