diff options
Diffstat (limited to 'net-mail/mailutils/files/mailutils-SQLinjection.patch')
| -rw-r--r-- | net-mail/mailutils/files/mailutils-SQLinjection.patch | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/net-mail/mailutils/files/mailutils-SQLinjection.patch b/net-mail/mailutils/files/mailutils-SQLinjection.patch new file mode 100644 index 000000000000..c87b6bf6ac31 --- /dev/null +++ b/net-mail/mailutils/files/mailutils-SQLinjection.patch @@ -0,0 +1,20 @@ +--- auth/sql.c.orig 2005-03-08 14:24:11.000000000 -0800 ++++ auth/sql.c 2005-05-13 19:12:38.000000000 -0700 +@@ -74,7 +74,7 @@ + + for (p = (const unsigned char *) ustr; *p; p++) + { +- if (strchr ("'\"", *p)) ++ if (strchr ("'\"\\", *p)) + len++; + } + +@@ -84,7 +84,7 @@ + + for (p = (const unsigned char *) ustr, q = str; *p; p++) + { +- if (strchr ("'\"", *p)) ++ if (strchr ("'\"\\", *p)) + *q++ = '\\'; + *q++ = *p; + } |