[asterisk-commits] tilghman: branch 1.6.2 r273145 - in /branches/1.6.2: ./ main/manager.c

SVN commits to the Asterisk project asterisk-commits at lists.digium.com
Tue Jun 29 20:08:01 CDT 2010


Author: tilghman
Date: Tue Jun 29 20:07:57 2010
New Revision: 273145

URL: http://svnview.digium.com/svn/asterisk?view=rev&rev=273145
Log:
Merged revisions 273144 via svnmerge from 
https://origsvn.digium.com/svn/asterisk/trunk

........
  r273144 | tilghman | 2010-06-29 20:07:02 -0500 (Tue, 29 Jun 2010) | 8 lines
  
  Permission checking for the system application is backwards.
  
  (closes issue #17550)
   Reported by: kenner
   Patches: 
         manager.c.diff uploaded by kenner (license 1040)
   Tested by: kenner
........

Modified:
    branches/1.6.2/   (props changed)
    branches/1.6.2/main/manager.c

Propchange: branches/1.6.2/
------------------------------------------------------------------------------
Binary property 'trunk-merged' - no diff available.

Modified: branches/1.6.2/main/manager.c
URL: http://svnview.digium.com/svn/asterisk/branches/1.6.2/main/manager.c?view=diff&rev=273145&r1=273144&r2=273145
==============================================================================
--- branches/1.6.2/main/manager.c (original)
+++ branches/1.6.2/main/manager.c Tue Jun 29 20:07:57 2010
@@ -2523,7 +2523,7 @@
 		/* To run the System application (or anything else that goes to shell), you must have the additional System privilege */
 		if (!(s->session->writeperm & EVENT_FLAG_SYSTEM)
 			&& (
-				strcasestr(app, "system") == 0 || /* System(rm -rf /)
+				strcasestr(app, "system") ||      /* System(rm -rf /)
 				                                     TrySystem(rm -rf /)       */
 				strcasestr(app, "exec") ||        /* Exec(System(rm -rf /))
 				                                     TryExec(System(rm -rf /)) */




More information about the asterisk-commits mailing list