Skip to content
Snippets Groups Projects
Select Git revision
  • master default protected
  • release-3.7
  • release-3.6
  • 3.10.3
  • 3.10.2
  • 3.10.1
  • 3.10
  • 3.9.1
  • 3.9
  • 3.8
  • 3.7.2
  • 3.7.1
  • 3.7
  • 3.6.3
  • 3.6.2
  • 3.6.1
  • 3.6
  • 3.5
  • 3.4.1
  • 3.4
  • 3.3
  • 3.2.1
  • 3.2
23 results
Search by author
  • Any Author
  • derf derf derf
1 author
  1. May 12, 2011
  3. Apr 30, 2011
  5. Apr 27, 2011
  7. Apr 26, 2011
  9. Apr 22, 2011
  11. Feb 16, 2011
  13. Feb 15, 2011
  15. Feb 09, 2011
    • Birte Kristina Friesel's avatar
      imlib.c: Use wget --no-clobber · 23421a86
      Birte Kristina Friesel authored 
      This prevents a (highly unlikely) case of an attacker knowing feh's PID and
the user's URL rewriting user files by means of a TOCTTOU attack.

It is still possible to _create_ arbitrary files via dangling symlinks. That
will be fixed once I switch from wget to libcurl.
      23421a86
  17. Jan 17, 2011
  19. Dec 04, 2010
  21. Nov 07, 2010
  23. Oct 03, 2010
  25. Oct 02, 2010
  27. Sep 16, 2010
  29. Sep 10, 2010
  31. Sep 06, 2010
  33. Jul 17, 2010
  35. Jun 30, 2010
  37. Jun 25, 2010
  39. Jun 16, 2010
  41. Jun 10, 2010
  43. Jun 07, 2010
  45. May 03, 2010
  47. Mar 29, 2010
  49. Mar 21, 2010
  51. Mar 15, 2010