]> git.ipfire.org Git - thirdparty/dhcpcd.git/commit
Escape | and & characters when passing to the shell.
authorRoy Marples <roy@marples.name>
Wed, 6 Apr 2011 08:16:32 +0000 (08:16 +0000)
committerRoy Marples <roy@marples.name>
Wed, 6 Apr 2011 08:16:32 +0000 (08:16 +0000)
commit66fedad6625f9cb6add84ac459f38fdc6397c52d
tree7b31a068b8d7c07eb388c3baca202fcedea55518
parent8d796699f002876a72d7543d426a5d42991f0b05
Escape | and & characters when passing to the shell.
Add functions for hooks to check validity of domain names and paths.
Ensure we set a valid hostname, DNS domain and NIS domain.
Document the need for input validation in dhcpcd-run-hooks(8).

Fixes CVE-2011-996.
Based on patches to dhcpcd-3 by Marius Tomaschewski <mt@suse.de>.
dhcp.c
dhcpcd-hooks/20-resolv.conf
dhcpcd-hooks/30-hostname
dhcpcd-hooks/50-yp.conf
dhcpcd-hooks/50-ypbind
dhcpcd-run-hooks.8.in
dhcpcd-run-hooks.in