1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
|
Subject: Hardening insecure argument checking
From: Al Nikolov <clown@debian.org>
Index: proxycheck/proxycheck.c
===================================================================
--- proxycheck.orig/proxycheck.c
+++ proxycheck/proxycheck.c
@@ -406,7 +406,10 @@ init(int argc, char **argv) {
if (p)
check_arg = p + 1, *p = ':';
else
- check_arg = NULL;
+ if (strcmp(optarg, "chat") == 0)
+ usage("this check requires parameters");
+ else
+ check_arg = NULL;
break;
case 'b':
|
