summaryrefslogtreecommitdiff
path: root/usr.sbin/sendmail/src/parseaddr.c
diff options
context:
space:
mode:
authorglass <glass@NetBSD.org>1993-06-28 22:32:43 +0000
committerglass <glass@NetBSD.org>1993-06-28 22:32:43 +0000
commitb54cac1cc7727bf0d275cf521cc23000f0dfd12e (patch)
treeb4a3ed27e6c736f4b3c52c25e1b9eee085224daa /usr.sbin/sendmail/src/parseaddr.c
parent455487b127ac978ac49a7b57591e5bf7de91a5d6 (diff)
Upgrade for sendmail 8.1B to 8.1C....
from Eric Allman <eric@vangogh.cs.berkeley.edu>: >Subject: sendmail 8.1C out ... >THIS IS AN URGENT FIX. There is a security problem in 8.1B (and >apparently most vendor versions of sendmail) that permits a user >to read any file on the system (don't ask, I won't go into details). >It should be installed immediately. ... > ====================================================================== > > 8.1C/8.1B 93/06/27 > Serious security bug fix: it was possible to read any file on > the system, regardless of ownership and permissions. > If a subroutine returns a fully qualified address, return it > immediately instead of feeding it back into rewriting. > This fixes a problem with mailertable lookups. > CONFIG: fix some M4 frotz (concat => CONCAT) >
Diffstat (limited to 'usr.sbin/sendmail/src/parseaddr.c')
-rw-r--r--usr.sbin/sendmail/src/parseaddr.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/usr.sbin/sendmail/src/parseaddr.c b/usr.sbin/sendmail/src/parseaddr.c
index 496e29990e2..3e4beb540c5 100644
--- a/usr.sbin/sendmail/src/parseaddr.c
+++ b/usr.sbin/sendmail/src/parseaddr.c
@@ -33,7 +33,7 @@
*/
#ifndef lint
-static char sccsid[] = "@(#)parseaddr.c 8.1 (Berkeley) 6/12/93";
+static char sccsid[] = "@(#)parseaddr.c 8.1 (Berkeley) 6/27/93";
#endif /* not lint */
# include "sendmail.h"
@@ -1143,6 +1143,8 @@ rewrite(pvp, ruleset, e)
stat = rewrite(pvp, atoi(npvp[1]), e);
if (rstat == EX_OK || stat == EX_TEMPFAIL)
rstat = stat;
+ if ((**pvp & 0377) == CANONNET)
+ rwr = NULL;
}
else
{