rpms/xemacs-packages-extra/F-8 xemacs-packages-extra-20070427-CVE-2008-2142.patch, NONE, 1.1

[Ville Skytta (scop)]

Author: scop

Update of /cvs/pkgs/rpms/xemacs-packages-extra/F-8
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv30754/F-8

Added Files:
	xemacs-packages-extra-20070427-CVE-2008-2142.patch 
Log Message:
...

xemacs-packages-extra-20070427-CVE-2008-2142.patch:

--- NEW FILE xemacs-packages-extra-20070427-CVE-2008-2142.patch ---
Index: xemacs-packages/edit-utils/fast-lock.el
===================================================================
RCS file: /pack/xemacscvs/XEmacs/packages/xemacs-packages/edit-utils/fast-lock.el,v
retrieving revision 1.4
retrieving revision 1.6
diff -u -r1.4 -r1.6
--- xemacs-packages/edit-utils/fast-lock.el	7 Mar 2006 07:10:32 -0000	1.4
+++ xemacs-packages/edit-utils/fast-lock.el	18 Jun 2008 20:39:22 -0000	1.6
@@ -247,7 +247,7 @@
 
 ;; User Variables:
 
-(defcustom fast-lock-cache-directories '("." "~/.emacs-flc")
+(defcustom fast-lock-cache-directories '("~/.emacs-flc")
 ; - `internal', keep each file's Font Lock cache file in the same file.
 ; - `external', keep each file's Font Lock cache file in the same directory.
   "*Directories in which Font Lock cache files are saved and read.
@@ -265,9 +265,14 @@
  ((\"^/your/true/home/directory/\" . \".\") \"~/.emacs-flc\")
 
 would cause a file's current directory to be used if the file is under your
-home directory hierarchy, or otherwise the absolute directory `~/.emacs-flc'."
+home directory hierarchy, or otherwise the absolute directory `~/.emacs-flc'.
+This list should contain only trusted directories in order to avoid processing
+potentially malicious cache files."
   :type '(repeat (choice (cons regexp directory) directory))
   :group 'fast-lock)
+
+;;;###autoload
+(put 'fast-lock-cache-directories 'risky-local-variable t)
 
 (defcustom fast-lock-minimum-size (* 25 1024)
   "*Minimum size of a buffer for cached fontification.