File vim-6.3-CVE-2007-2953.patch of Package kvim
--- vim63/src/ex_cmds.c.CVE-2007-2953 2008-07-14 15:14:33.000000000 +0200
+++ vim63/src/ex_cmds.c 2008-07-14 15:15:17.000000000 +0200
@@ -5511,12 +5511,12 @@
for (i = 0; i < ga.ga_len; ++i)
{
s = ((char_u **)ga.ga_data)[i];
- if (STRNCMP(s, "help-tags", 9) == 0)
+ if (STRNCMP(s, "help-tags\t", 10) == 0)
/* help-tags entry was added in formatted form */
fprintf(fd_tags, (char *)s);
else
{
- fprintf(fd_tags, "%s\t/*", s);
+ fputs((char *)s, fd_tags);
for (p1 = s; *p1 != '\t'; ++p1)
{
/* insert backslash before '\\' and '/' */