1
0
mirror of https://github.com/wting/autojump synced 2024-10-27 20:34:07 +00:00

Fix security bug that allows running arbitrary user code.

https://bugzilla.redhat.com/show_bug.cgi?id=950777
This commit is contained in:
William Ting 2013-04-24 15:34:53 -05:00
parent d3c1765255
commit ad09ee27d4
3 changed files with 4 additions and 4 deletions

View File

@ -34,7 +34,7 @@ import re
import shutil import shutil
from tempfile import NamedTemporaryFile from tempfile import NamedTemporaryFile
VERSION = 'release-v21.5.5' VERSION = 'release-v21.5.6'
MAX_KEYWEIGHT = 1000 MAX_KEYWEIGHT = 1000
MAX_STORED_PATHS = 1000 MAX_STORED_PATHS = 1000
COMPLETION_SEPARATOR = '__' COMPLETION_SEPARATOR = '__'

View File

@ -15,7 +15,7 @@ elif [ -s /etc/profile.d/autojump.${shell} ]; then
source /etc/profile.d/autojump.${shell} source /etc/profile.d/autojump.${shell}
# check custom install locations (modified by Homebrew or using --destdir option) # check custom install locations (modified by Homebrew or using --destdir option)
elif [ -s custom_install/autojump.${shell} ]; then elif [ -s /destdir_${RANDOM}_install/autojump.${shell} ]; then
source custom_install/autojump.${shell} source /destdir_${RANDOM}_install/autojump.${shell}
fi fi

View File

@ -222,7 +222,7 @@ install -v -m 0755 ./bin/_j ${destdir}${zshsharedir} || exit 1
# MODIFY AUTOJUMP.SH FOR CUSTOM INSTALLS # MODIFY AUTOJUMP.SH FOR CUSTOM INSTALLS
if [[ -z ${local} ]] && [[ -z ${global} ]]; then if [[ -z ${local} ]] && [[ -z ${global} ]]; then
sed -i "s:custom_install:${destdir}etc/profile.d:g" ${destdir}etc/profile.d/autojump.sh sed -i "s:/destdir_.*_install:${destdir}etc/profile.d:g" ${destdir}etc/profile.d/autojump.sh
fi fi
# DISPLAY ADD MESSAGE # DISPLAY ADD MESSAGE