← Back to branch summary

~ubuntu-branches/ubuntu/precise/kde-runtime/precise-updates

« back to all changes in this revision

Viewing changes to kioslave/smb/kio_smb_auth.cpp

  • Committer: Package Import Robot
  • Author(s): Jonathan Riddell
  • Date: 2014-11-20 15:46:42 UTC
  • mfrom: (18.1.5 precise-proposed)
  • Revision ID: package-import@ubuntu.com-20141120154642-hyesdbuvsk78ihtz
Tags: 4:4.8.5-0ubuntu0.3
https://launchpad.net/bugs/1393479
* SECURITY UPDATE: Insufficient Input Validation By IO Slaves and
  Webkit Part
 - Add upstream_CVE-2014-8600.diff to escape protocol twice: once
   for i18n, and once for HTML
 - https://www.kde.org/info/security/advisory-20141113-1.txt
 - CVE-2014-8600
 - LP: #1393479

Show diffs side-by-side

added added

removed removed

Lines of Context:
kioslave/smb/kio_smb_auth.cpp
154
154
    if ( openPasswordDialog(info) ) {
155
155
        kDebug(KIO_SMB) << "openPasswordDialog returned " << info.username;
156
156
        url.setUser(info.username);
 
157
 
 
158
        if (info.keepPassword) {
 
159
            kDebug(KIO_SMB) << "Caching info.username = " << info.username
 
160
                            << ", info.url = " << info.url.prettyUrl();
 
161
            cacheAuthentication(info);
 
162
        }
 
163
 
157
164
        return true;
158
165
    }
159
166
    kDebug(KIO_SMB) << "no value from openPasswordDialog\n";