summaryrefslogtreecommitdiff
path: root/CONTRIBUTORS
diff options
context:
space:
mode:
authorKlaus Schmidinger <vdr@tvdr.de>2005-12-30 15:11:16 +0100
committerKlaus Schmidinger <vdr@tvdr.de>2005-12-30 15:11:16 +0100
commit3f21bf20c52599cc6dbe252488dc3dda36402f3c (patch)
tree57bb30be8f24e013ec15bcdcea60c307a3d7baf2 /CONTRIBUTORS
parent924827fcbe0e7276c458c051d1f56cb8f4ca19a1 (diff)
downloadvdr-3f21bf20c52599cc6dbe252488dc3dda36402f3c.tar.gz
vdr-3f21bf20c52599cc6dbe252488dc3dda36402f3c.tar.bz2
New option '-g'; fixed security hole CAN-2005-0071 when grabbing to file
Diffstat (limited to 'CONTRIBUTORS')
-rw-r--r--CONTRIBUTORS6
1 files changed, 6 insertions, 0 deletions
diff --git a/CONTRIBUTORS b/CONTRIBUTORS
index 44641efd..2e977d5e 100644
--- a/CONTRIBUTORS
+++ b/CONTRIBUTORS
@@ -1370,6 +1370,8 @@ Darren Salt <linux@youmustbejoking.demon.co.uk>
'--no-kbd'
for adding '__attribute__' to functions that use printf() like parameters
for suggesting to write grabbed images to the SVDRP connection encoded in base64
+ for suggesting to open the file handle in the SVDRP GRAB command in a way that
+ it won't follow symbolic links, and to canonicalize the file name
Sean Carlos <seanc@libero.it>
for translating OSD texts to the Italian language
@@ -1571,3 +1573,7 @@ Bob Withers <bwit@pobox.com>
for publishing a Base64 encoder at http://www.ruffboy.com/download.htm
(http://www.ruffboy.com/code/Base64.zip), part of which was used when writing
the cBase64Encoder class
+
+Javier Fernández-Sanguino Peña <jfs@computer.org>
+ for reporting a security hole in the way the SVDRP command GRAB writes the
+ image file