subject:"RFC\/PATCH\: avoid metafilevirus problems"

Re: RFC/PATCH: avoid metafilevirus problems

2006-01-03 Thread Peter Beutner

Walt Ogburn schrieb: On Mon, 2 Jan 2006, Marcus Meissner wrote: Hi, requesting comments... This patch reduces the attack vector on metafiles. I originally wanted to filter only SETABORTPROC, but there are a lot of things that might be used to inject code. Comments? Would it not be bett

Re: RFC/PATCH: avoid metafilevirus problems

2006-01-02 Thread Walt Ogburn

On Mon, 2 Jan 2006, Marcus Meissner wrote: > Hi, > > requesting comments... > > This patch reduces the attack vector on metafiles. > > I originally wanted to filter only SETABORTPROC, > but there are a lot of things that might be used > to inject code. > > Comments? Would it not be better to bl

RFC/PATCH: avoid metafilevirus problems

2006-01-02 Thread Marcus Meissner

Hi, requesting comments... This patch reduces the attack vector on metafiles. I originally wanted to filter only SETABORTPROC, but there are a lot of things that might be used to inject code. Comments? Ciao, Marcus Changelog: Only allow whitelisted escape codes when playing metafiles.