From 3f21bf20c52599cc6dbe252488dc3dda36402f3c Mon Sep 17 00:00:00 2001 From: Klaus Schmidinger Date: Fri, 30 Dec 2005 15:11:16 +0100 Subject: New option '-g'; fixed security hole CAN-2005-0071 when grabbing to file --- CONTRIBUTORS | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'CONTRIBUTORS') diff --git a/CONTRIBUTORS b/CONTRIBUTORS index 44641efd..2e977d5e 100644 --- a/CONTRIBUTORS +++ b/CONTRIBUTORS @@ -1370,6 +1370,8 @@ Darren Salt '--no-kbd' for adding '__attribute__' to functions that use printf() like parameters for suggesting to write grabbed images to the SVDRP connection encoded in base64 + for suggesting to open the file handle in the SVDRP GRAB command in a way that + it won't follow symbolic links, and to canonicalize the file name Sean Carlos for translating OSD texts to the Italian language @@ -1571,3 +1573,7 @@ Bob Withers for publishing a Base64 encoder at http://www.ruffboy.com/download.htm (http://www.ruffboy.com/code/Base64.zip), part of which was used when writing the cBase64Encoder class + +Javier Fernández-Sanguino Peña + for reporting a security hole in the way the SVDRP command GRAB writes the + image file -- cgit v1.2.3