tree cdcf6eaa96eabfb9007bcc9d34194b82a6d286a2
parent fb12c6d8bb6515512c3cd00dfcb2670a6c54ba49
author Damien Miller <djm@mindrot.org> 1328908697 +1100
committer Damien Miller <djm@mindrot.org> 1328908697 +1100

   - dtucker@cvs.openbsd.org 2012/01/18 21:46:43
     [clientloop.c]
     Ensure that $DISPLAY contains only valid characters before using it to
     extract xauth data so that it can't be used to play local shell
     metacharacter games.  Report from r00t_ati at ihteam.net, ok markus.