[arch-commits] Commit in kio-extras/trunk (PKGBUILD sanitize-input.patch)

Andrea Scarpino andrea at archlinux.org
Fri Nov 14 13:08:23 UTC 2014


    Date: Friday, November 14, 2014 @ 14:08:23
  Author: andrea
Revision: 226235

upgpkg: kio-extras 5.1.1-2

Sanitize input

Added:
  kio-extras/trunk/sanitize-input.patch
Modified:
  kio-extras/trunk/PKGBUILD

----------------------+
 PKGBUILD             |   11 ++++++++---
 sanitize-input.patch |   31 +++++++++++++++++++++++++++++++
 2 files changed, 39 insertions(+), 3 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2014-11-14 13:03:48 UTC (rev 226234)
+++ PKGBUILD	2014-11-14 13:08:23 UTC (rev 226235)
@@ -4,7 +4,7 @@
 
 pkgname=kio-extras
 pkgver=5.1.1
-pkgrel=1
+pkgrel=2
 pkgdesc="Additional components to increase the functionality of KIO"
 arch=('i686' 'x86_64')
 url='https://projects.kde.org/projects/kde/workspace/kio-extras'
@@ -13,11 +13,16 @@
 makedepends=('extra-cmake-modules' 'kdoctools' 'python')
 options=('!buildflags')
 install="${pkgname}.install"
-source=("http://download.kde.org/stable/plasma/${pkgver}/$pkgname-$pkgver.tar.xz")
-md5sums=('831fb9bc8960932233cf6042f6097751')
+source=("http://download.kde.org/stable/plasma/${pkgver}/$pkgname-$pkgver.tar.xz"
+        'sanitize-input.patch')
+md5sums=('831fb9bc8960932233cf6042f6097751'
+         '6462465f886decd5c7706d09bc71b2b8')
 
 prepare() {
   mkdir -p build
+
+  cd ${pkgname}-${pkgver}
+  patch -p1 -i "${srcdir}"/sanitize-input.patch
 }
 
 build() {

Added: sanitize-input.patch
===================================================================
--- sanitize-input.patch	                        (rev 0)
+++ sanitize-input.patch	2014-11-14 13:08:23 UTC (rev 226235)
@@ -0,0 +1,31 @@
+From: Martin Sandsmark <martin.sandsmark at kde.org>
+Date: Thu, 13 Nov 2014 12:42:49 +0000
+Subject: Sanitize path
+X-Git-Url: http://quickgit.kde.org/?p=kio-extras.git&a=commitdiff&h=13155c8eb71d1c946bea21c38ea0f8ca7c7013cd
+---
+Sanitize path
+
+Reviewed at security at kde.org
+---
+
+
+--- a/bookmarks/kio_bookmarks.cpp
++++ b/bookmarks/kio_bookmarks.cpp
+@@ -22,6 +22,7 @@
+ #include <stdlib.h>
+ 
+ #include <qregexp.h>
++#include <qtextdocument.h>
+ #include <qurlquery.h>
+ 
+ #include <kapplication.h>
+@@ -198,7 +199,7 @@
+     echoImage(regexp.cap(1), regexp.cap(2), QUrlQuery(url).queryItemValue("size"));
+   } else {
+     echoHead();
+-    echo("<p class=\"message\">" + i18n("Wrong request: %1",path) + "</p>");
++    echo("<p class=\"message\">" + i18n("Wrong request: %1", Qt::escape(url.toDisplayString())) + "</p>");
+   }
+   finished();
+ }
+


More information about the arch-commits mailing list