Skip to content
  1. Feb 09, 2011
    • Birte Kristina Friesel's avatar
      imlib.c: Use wget --no-clobber · 23421a86
      Birte Kristina Friesel authored
      This prevents a (highly unlikely) case of an attacker knowing feh's PID and
      the user's URL rewriting user files by means of a TOCTTOU attack.
      
      It is still possible to _create_ arbitrary files via dangling symlinks. That
      will be fixed once I switch from wget to libcurl.
      23421a86
  2. Feb 06, 2011
  3. Jan 29, 2011
  4. Jan 26, 2011
  5. Jan 24, 2011
  6. Jan 23, 2011
  7. Jan 22, 2011
  8. Jan 16, 2011
  9. Dec 05, 2010
  10. Dec 03, 2010
  11. Nov 30, 2010
  12. Oct 07, 2010
  13. Oct 02, 2010
  14. Sep 27, 2010
  15. Sep 26, 2010
  16. Sep 14, 2010
  17. Sep 10, 2010
  18. Sep 07, 2010
  19. Sep 06, 2010
  20. Sep 05, 2010
  21. Aug 27, 2010
  22. Aug 24, 2010
  23. Aug 22, 2010
  24. Aug 15, 2010
  25. Jul 26, 2010
  26. Jul 14, 2010
  27. Jul 09, 2010
  28. Jul 08, 2010
  29. Jul 04, 2010
  30. Jun 25, 2010