File sudo-1.7.2-CVE-2010-0426.diff of Package sudo
Index: match.c
===================================================================
--- match.c.orig
+++ match.c
@@ -381,7 +381,7 @@ command_matches(sudoers_cmnd, sudoers_ar
char *sudoers_args;
{
/* Check for pseudo-commands */
- if (strchr(user_cmnd, '/') == NULL) {
+ if (sudoers_cmnd[0] != '/') {
/*
* Return true if both sudoers_cmnd and user_cmnd are "sudoedit" AND
* a) there are no args in sudoers OR