Subject: CVS commit: src/gnu/dist/gcc4
To: None <source-changes@NetBSD.org>
From: matthew green <mrg@netbsd.org>
List: source-changes
Date: 05/12/2006 00:51:13
Module Name: src
Committed By: mrg
Date: Fri May 12 00:51:13 UTC 2006
Modified Files:
src/gnu/dist/gcc4/gcc/doc: cppenv.texi
src/gnu/dist/gcc4/libcpp: files.c
Log Message:
pull across from GCC3 tree:
>date: 2004/11/30 01:51:13; author: jwise; state: Exp; lines: +21 -3
>As discussed on tech-toolchain@netbsd.org, make cpp refuse to attempt to
>parse a #include'd file which does not pass S_ISREG() if the environment variable
>CPP_RESTRICTED is set.
>
>This is primarily intended for use by programs such as calendar(1) which
>use cpp to parse untrusted user files -- without this change (and the corresponding
>change to calendar(1)), any user can cause a denial-of-service for the daily
>calendar -a run by #include'ing a named pipe.
>
>Many thanks to christos@netbsd for his help in polishing this.
To generate a diff of this commit:
cvs rdiff -r1.1.1.1 -r1.2 src/gnu/dist/gcc4/gcc/doc/cppenv.texi
cvs rdiff -r1.1.1.1 -r1.2 src/gnu/dist/gcc4/libcpp/files.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.