openbsd-ports/net/wget/patches/patch-src_http_h
jasper b736114294 SECURITY FIX for CVE-2010-2252
By default, on server redirects, use the original URL to get the
local file name.

ok naddy@
additional testing by kevlo@, thanks.
2010-09-13 16:48:11 +00:00

20 lines
659 B
Plaintext

$OpenBSD: patch-src_http_h,v 1.1 2010/09/13 16:48:11 jasper Exp $
By default, on server redirects, use the original URL to get the
local file name. Fixes CVE-2010-2252.
Diff from upstream.
--- src/http.h.orig Sat Sep 5 00:31:54 2009
+++ src/http.h Mon Sep 13 16:47:49 2010
@@ -33,8 +33,8 @@ as that of the covered work. */
struct url;
-uerr_t http_loop (struct url *, char **, char **, const char *, int *,
- struct url *, struct iri *);
+uerr_t http_loop (struct url *, struct url *, char **, char **, const char *,
+ int *, struct url *, struct iri *);
void save_cookies (void);
void http_cleanup (void);
time_t http_atotm (const char *);