]> granicus.if.org Git - procps-ng/commit
top: add another field sanity check in 'config_file()'
authorJim Warner <james.warner@comcast.net>
Sun, 3 Jun 2018 05:00:00 +0000 (00:00 -0500)
committerCraig Small <csmall@enc.com.au>
Sat, 9 Jun 2018 11:35:20 +0000 (21:35 +1000)
commit59c8c1c86cd123fb2abd8121465250896d9f0823
tree75a1541493153130c55c02d87a5d7523ea3845ae
parent8ce5f080a2146cc8e5bb9208c9eebb7e691fd36c
top: add another field sanity check in 'config_file()'

Until the Qualys security audit I had never considered
it a possibility that some malicious person might edit
the top config file to achieve some nefarious results.

And while the Qualys approach tended to concentrate on
the symptoms from such an effort, subsequent revisions
more properly concentrated on startup and that rcfile.

This commit completes those efforts with 1 more field.

Signed-off-by: Jim Warner <james.warner@comcast.net>
top/top.c