diff options
Diffstat (limited to 'net-irc/konversation/files/konversation-1.0.1-media-script-vulnerability.patch')
-rw-r--r-- | net-irc/konversation/files/konversation-1.0.1-media-script-vulnerability.patch | 41 |
1 files changed, 0 insertions, 41 deletions
diff --git a/net-irc/konversation/files/konversation-1.0.1-media-script-vulnerability.patch b/net-irc/konversation/files/konversation-1.0.1-media-script-vulnerability.patch deleted file mode 100644 index 7c7bd32cf6e3..000000000000 --- a/net-irc/konversation/files/konversation-1.0.1-media-script-vulnerability.patch +++ /dev/null @@ -1,41 +0,0 @@ -diff -aur konversation-1.0.1/konversation/src/channel.cpp konversation-1.0.1-fixed/konversation/src/channel.cpp ---- konversation-1.0.1/konversation/src/channel.cpp 2006-10-06 18:43:29.000000000 +0200 -+++ konversation-1.0.1-fixed/konversation/src/channel.cpp 2007-09-05 01:10:52.000000000 +0200 -@@ -890,7 +890,7 @@ - } - - // Send all strings, one after another -- QStringList outList=QStringList::split('\n',outputAll); -+ QStringList outList=QStringList::split(QRegExp("[\r\n]+"),outputAll); - for(unsigned int index=0;index<outList.count();index++) - { - QString output(outList[index]); -diff -aur konversation-1.0.1/konversation/src/konvdcop.cpp konversation-1.0.1-fixed/konversation/src/konvdcop.cpp ---- konversation-1.0.1/konversation/src/konvdcop.cpp 2006-10-06 18:43:29.000000000 +0200 -+++ konversation-1.0.1-fixed/konversation/src/konvdcop.cpp 2007-09-05 01:11:08.000000000 +0200 -@@ -82,15 +82,23 @@ - emit dcopMultiServerRaw("me " + message); - } - --void KonvDCOP::say(const QString& server,const QString& target,const QString& command) -+void KonvDCOP::say(const QString& _server,const QString& _target,const QString& _command) - { -+ //Sadly, copy on write doesn't exist with QString::replace -+ QString server(_server), target(_target), command(_command); -+ - // TODO: this just masks a greater problem - Server::addQuery will return a query for '' --argonel - // TODO: other DCOP calls need argument checking too --argonel - if (server.isEmpty() || target.isEmpty() || command.isEmpty()) - kdDebug() << "KonvDCOP::say() requires 3 arguments." << endl; - else - { -- kdDebug() << "KonvDCOP::say()" << endl; -+ command.replace('\n',"\\n"); -+ command.replace('\r',"\\r"); -+ target.remove('\n'); -+ target.remove('\r'); -+ server.remove('\n'); -+ server.remove('\r'); - // Act as if the user typed it - emit dcopSay(server,target,command); - } |