From f850662e9231d6437be0ff72e537230fc0aacf79 Mon Sep 17 00:00:00 2001 From: franklahm Date: Mon, 20 Jul 2009 09:06:03 +0000 Subject: [PATCH] Remove variable expansion for BSD printers. Fixes CVE-2008-5718. Merge from 2.0 branch. --- etc/papd/lp.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/etc/papd/lp.c b/etc/papd/lp.c index b0d8af94029..772250b25ae 100644 --- a/etc/papd/lp.c +++ b/etc/papd/lp.c @@ -1,5 +1,5 @@ /* - * $Id: lp.c,v 1.26 2009-02-04 22:35:45 didg Exp $ + * $Id: lp.c,v 1.27 2009-07-20 09:06:03 franklahm Exp $ * * Copyright (c) 1990,1994 Regents of The University of Michigan. * All Rights Reserved. See COPYRIGHT. @@ -586,9 +586,9 @@ int lp_open( out, sat ) } lp_setup_comments(CH_UNIX); - pipe_cmd = pipexlate(printer->p_printer); + pipe_cmd = printer->p_printer; if (!pipe_cmd) { - LOG(log_error, logtype_papd, "lp_open: can't generate pipe cmd" ); + LOG(log_error, logtype_papd, "lp_open: no pipe cmd" ); spoolerror( out, NULL ); return( -1 ); }