cvs commit: ports/java/jdk13/files patch-j2sdk1.3.1-jar-Main.java patch-j2sdk1.3.1-resources-jar.properties

[Greg Lewis]

glewis      2005-04-27 20:31:33 UTC

  FreeBSD ports repository

  Added files:
    java/jdk13/files     patch-j2sdk1.3.1-jar-Main.java 
                         patch-j2sdk1.3.1-resources-jar.properties 
  Log:
  . Ensure that when files are extracted that their fully resolved path lies
    in or below the current working directory.  Fixes a security problem with
    jar(1).
  
    This fix may change to be compatible with whatever fix Sun applies when
    they release the next version of 1.5.
  
  Revision  Changes    Path
  1.1       +56 -0     ports/java/jdk13/files/patch-j2sdk1.3.1-jar-Main.java (new)
  1.1       +11 -0     ports/java/jdk13/files/patch-j2sdk1.3.1-resources-jar.properties (new)