Skip to content
Snippets Groups Projects
Select Git revision
  • master default protected
  • release-3.7
  • release-3.6
  • 3.10.3
  • 3.10.2
  • 3.10.1
  • 3.10
  • 3.9.1
  • 3.9
  • 3.8
  • 3.7.2
  • 3.7.1
  • 3.7
  • 3.6.3
  • 3.6.2
  • 3.6.1
  • 3.6
  • 3.5
  • 3.4.1
  • 3.4
  • 3.3
  • 3.2.1
  • 3.2
23 results
Search by author
  • Any Author
  • derf derf derf
1 author
  1. Feb 16, 2011
  3. Feb 15, 2011
  5. Feb 09, 2011
    • Birte Kristina Friesel's avatar
      imlib.c: Use wget --no-clobber · 23421a86
      Birte Kristina Friesel authored 
      This prevents a (highly unlikely) case of an attacker knowing feh's PID and
the user's URL rewriting user files by means of a TOCTTOU attack.

It is still possible to _create_ arbitrary files via dangling symlinks. That
will be fixed once I switch from wget to libcurl.
      23421a86
  7. Jan 17, 2011
  9. Dec 04, 2010
  11. Nov 07, 2010
  13. Oct 03, 2010
  15. Oct 02, 2010
  17. Sep 16, 2010
  19. Sep 10, 2010
  21. Sep 06, 2010
  23. Jul 17, 2010
  25. Jun 30, 2010
  27. Jun 25, 2010
  29. Jun 16, 2010
  31. Jun 10, 2010
  33. Jun 07, 2010
  35. May 03, 2010
  37. Mar 29, 2010
  39. Mar 21, 2010
  41. Mar 15, 2010
  43. Feb 26, 2010
  45. Feb 15, 2010
  47. Feb 13, 2010
  49. Feb 11, 2010
  51. Feb 08, 2010