projects / synfig.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e3bde2b) | patch
Minor security fix: the unused mod_ffmpeg importer used popen to run convert, change...
authorpabs <pabs@1f10aa63-cdf2-0310-b900-c93c546f37ac>
Fri, 7 Dec 2007 04:29:57 +0000 (04:29 +0000)
committerpabs <pabs@1f10aa63-cdf2-0310-b900-c93c546f37ac>
Fri, 7 Dec 2007 04:29:57 +0000 (04:29 +0000)
commit83224f8cf1f9b7b15918a130759717a5a375be91
tree4c700a67d46058fd3fdbfcd54b8679570ac5fe00tree | snapshot
parente3bde2b95fdc0fe05d1fe855667058dc4f6a4e6dcommit | diff
Minor security fix: the unused mod_ffmpeg importer used popen to run convert, change it to use pipe, fork and exec. Malicious sif files could previously have executed arbitrary shell commands. Also disable the unused part of the mod_imagemagick importer.

git-svn-id: http://svn.voria.com/code@1186 1f10aa63-cdf2-0310-b900-c93c546f37ac
synfig-core/trunk/src/modules/mod_ffmpeg/mptr_ffmpeg.cpp diff | blob | history
synfig-core/trunk/src/modules/mod_ffmpeg/mptr_ffmpeg.h diff | blob | history
synfig-core/trunk/src/modules/mod_imagemagick/mptr_imagemagick.cpp diff | blob | history
Synfig (Bombe’s repository)