Skip to content
Snippets Groups Projects
Select Git revision
  • master default protected
  • release-3.7
  • release-3.6
  • 3.10.3
  • 3.10.2
  • 3.10.1
  • 3.10
  • 3.9.1
  • 3.9
  • 3.8
  • 3.7.2
  • 3.7.1
  • 3.7
  • 3.6.3
  • 3.6.2
  • 3.6.1
  • 3.6
  • 3.5
  • 3.4.1
  • 3.4
  • 3.3
  • 3.2.1
  • 3.2
23 results
Search by author
  • Any Author
  • derf derf derf
1 author
  1. May 01, 2011
  3. Apr 30, 2011
  5. Apr 27, 2011
  7. Apr 26, 2011
  9. Apr 23, 2011
  11. Apr 22, 2011
  13. Apr 16, 2011
  15. Apr 12, 2011
  17. Apr 01, 2011
  19. Mar 22, 2011
  21. Mar 21, 2011
  23. Mar 19, 2011
  25. Mar 12, 2011
  27. Mar 02, 2011
  29. Feb 27, 2011
  31. Feb 16, 2011
  33. Feb 15, 2011
  35. Feb 09, 2011
    • Birte Kristina Friesel's avatar
      imlib.c: Use wget --no-clobber · 23421a86
      Birte Kristina Friesel authored 
      This prevents a (highly unlikely) case of an attacker knowing feh's PID and
the user's URL rewriting user files by means of a TOCTTOU attack.

It is still possible to _create_ arbitrary files via dangling symlinks. That
will be fixed once I switch from wget to libcurl.
      23421a86
  37. Feb 05, 2011