pkgsrc/x11/wterm/patches/patch-af
tron 71b32baca1 Don't try to use the X11 display ":0" if the display not defined because
":0" might not belong to current user. This fixes CVE-2008-1142.
2008-05-22 12:30:44 +00:00

17 lines
489 B
Text

$NetBSD: patch-af,v 1.1 2008/05/22 12:30:44 tron Exp $
--- src/main.c.orig 2001-08-17 05:47:41.000000000 +0100
+++ src/main.c 2008-05-22 13:20:38.000000000 +0100
@@ -1444,8 +1444,10 @@
/*
* Open display, get options/resources and create the window
*/
- if ((display_name = getenv("DISPLAY")) == NULL)
- display_name = ":0";
+ if ((display_name = getenv("DISPLAY")) == NULL) {
+ print_error("display not defined");
+ exit(EXIT_FAILURE);
+ }
get_options(argc, argv);