[gentoo-commits] gentoo-x86 commit in kde-apps/kdebase-kioslaves/files: kdebase-kioslaves-CVE-2014-8600.patch

[gentoo-commits] gentoo-x86 commit in kde-apps/kdebase-kioslaves/files: kdebase-kioslaves-CVE-2014-8600.patch

[Michael Palimaka (kensington)]

kensington    15/06/04 18:44:45

  Added:                kdebase-kioslaves-CVE-2014-8600.patch
  Log:
  Moved package from kde-base to kde-apps.
  
  (Portage version: 2.2.20/cvs/Linux x86_64, signed Manifest commit with key 0x06B1F38DCA45A1EC!)

Revision  Changes    Path
1.1                  kde-apps/kdebase-kioslaves/files/kdebase-kioslaves-CVE-2014-8600.patch

file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/kde-apps/kdebase-kioslaves/files/kdebase-kioslaves-CVE-2014-8600.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/kde-apps/kdebase-kioslaves/files/kdebase-kioslaves-CVE-2014-8600.patch?rev=1.1&content-type=text/plain

Index: kdebase-kioslaves-CVE-2014-8600.patch
===================================================================
From: Martin Sandsmark <martin.sandsmark@kde.org>
Date: Thu, 13 Nov 2014 12:29:01 +0000
Subject: Sanitize path
X-Git-Url: http://quickgit.kde.org/?p=kde-runtime.git&a=commitdiff&h=d68703900edc8416fbcd2550cd336cbbb76decb9
---
Sanitize path
---


--- a/kioslave/bookmarks/kio_bookmarks.cpp
+++ b/kioslave/bookmarks/kio_bookmarks.cpp
@@ -22,6 +22,7 @@
 #include <stdlib.h>
 
 #include <qregexp.h>
+#include <qtextdocument.h>
 
 #include <kapplication.h>
 #include <kcmdlineargs.h>
@@ -197,7 +198,7 @@
     echoImage(regexp.cap(1), regexp.cap(2), url.queryItem("size"));
   } else {
     echoHead();
-    echo("<p class=\"message\">" + i18n("Wrong request: %1",path) + "</p>");
+    echo("<p class=\"message\">" + i18n("Bad request: %1", Qt::escape(Qt::escape(url.prettyUrl()))) + "</p>");
   }
   finished();
 }