Remove variable expansion for BSD printers. Fixes CVE-2008-5718. Merge from 2.0 branch.

diff --git a/etc/papd/lp.c b/etc/papd/lp.c
index b0d8af94029a4c98dbc9d0bc525bebff618cd09c..772250b25ae609c462ad2244394de97984355f94 100644 (file)
--- a/etc/papd/lp.c
+++ b/etc/papd/lp.c
@@ -1,5 +1,5 @@
 /*
- * $Id: lp.c,v 1.26 2009-02-04 22:35:45 didg Exp $
+ * $Id: lp.c,v 1.27 2009-07-20 09:06:03 franklahm Exp $
  *
  * Copyright (c) 1990,1994 Regents of The University of Michigan.
  * All Rights Reserved.  See COPYRIGHT.
@@ -586,9 +586,9 @@ int lp_open( out, sat )
        }
 
        lp_setup_comments(CH_UNIX);
-       pipe_cmd = pipexlate(printer->p_printer);
+       pipe_cmd = printer->p_printer;
        if (!pipe_cmd) {
-           LOG(log_error, logtype_papd, "lp_open: can't generate pipe cmd" );
+           LOG(log_error, logtype_papd, "lp_open: no pipe cmd" );
            spoolerror( out, NULL );
            return( -1 );
        }