Michael Schröder
54ca44b456
- fix untrusted environment execution [bsc#1160796] [CVE-2019-14868] OBS-URL: https://build.opensuse.org/package/show/shells/ksh?expand=0&rev=240
25 lines
893 B
Diff
25 lines
893 B
Diff
iffe depends on cc -E not inserting newlines between tokens
|
|
|
|
Index: ksh93/src/cmd/INIT/iffe.sh
|
|
===================================================================
|
|
--- ksh93.orig/src/cmd/INIT/iffe.sh
|
|
+++ ksh93/src/cmd/INIT/iffe.sh
|
|
@@ -3427,7 +3427,7 @@ $src
|
|
(eval "$src") <&$nullin || e=1
|
|
;;
|
|
mac*|nomac*)
|
|
- if compile $cc -E $tmp.c <&$nullin >$tmp.i
|
|
+ if compile $cc -E -P $tmp.c <&$nullin >$tmp.i
|
|
then sed -e '/<<[ ]*".*"[ ]*>>/!d' -e 's/<<[ ]*"//g' -e 's/"[ ]*>>//g' $tmp.i
|
|
else e=1
|
|
fi
|
|
@@ -3718,7 +3718,7 @@ $inc
|
|
<<\"#define $v\">> $v <<\"/* native $v */\">>
|
|
<<\"#endif\">>
|
|
#endif" > $tmp.c
|
|
- if compile $cc -E $tmp.c <&$nullin >$tmp.i
|
|
+ if compile $cc -E -P $tmp.c <&$nullin >$tmp.i
|
|
then sed -e '/<<[ ]*".*"[ ]*>>/!d' -e 's/<<[ ]*"//g' -e 's/"[ ]*>>//g' $tmp.i > $tmp.t
|
|
if test -s $tmp.t
|
|
then success
|