[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] Internet Explorer FTP client can be used to send mail

> Isn't Konqueror a "free software"? 
> So, where's the "attached patch"? 

Attached.  Sorry, didn't know about KDE when I sent the first email, and
it took me awhile to dig into the C++.

-- 
Ian Gulliver
Penguin Hosting
"Failure is not an option; it comes bundled with your Microsoft products."

--- kdelibs-3.2.3/kioslave/ftp/ftp.cc   2004-02-15 16:15:27.000000000 -0500
+++ kdelibs-3.2.3-ftp-fixed/kioslave/ftp/ftp.cc 2004-12-25 00:44:27.000000000 
-0500
@@ -652,6 +652,9 @@
 {
   assert( sControl > 0 );
 
+  if (cmd.find('\r') != -1 || cmd.find('\n') != -1)
+         return false;
+
   QCString buf = cmd;
   buf += "\r\n";

Attachment: signature.asc
Description: Digital signature

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html