emacs/emacs-CVE-2014-3423.patch

17 lines
706 B
Diff

diff --git a/lisp/net/browse-url.el b/lisp/net/browse-url.el
index 19e513a..1a28e26 100644
--- a/lisp/net/browse-url.el
+++ b/lisp/net/browse-url.el
@@ -1335,7 +1335,10 @@ used instead of `browse-url-new-window-flag'."
(kill-buffer nil)))
(if (and pid (zerop (signal-process pid 0))) ; Mosaic running
(save-excursion
- (find-file (format "/tmp/Mosaic.%d" pid))
+ ;; This is a predictable temp-file name, which is bad,
+ ;; but it is what Mosaic uses/used.
+ ;; So it's not Emacs's problem. http://bugs.debian.org/747100
+ (find-file (format "/tmp/Mosaic.%d" pid))
(erase-buffer)
(insert (if (browse-url-maybe-new-window new-window)
"newwin\n"