=================================================================== RCS file: /cvs/mandoc/mandoc.1,v retrieving revision 1.123 retrieving revision 1.124 diff -u -p -r1.123 -r1.124 --- mandoc/mandoc.1 2014/11/25 20:18:15 1.123 +++ mandoc/mandoc.1 2014/11/27 23:40:19 1.124 @@ -1,4 +1,4 @@ -.\" $Id: mandoc.1,v 1.123 2014/11/25 20:18:15 schwarze Exp $ +.\" $Id: mandoc.1,v 1.124 2014/11/27 23:40:19 schwarze Exp $ .\" .\" Copyright (c) 2009, 2010, 2011 Kristaps Dzonsons .\" Copyright (c) 2012, 2014 Ingo Schwarze @@ -15,7 +15,7 @@ .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. .\" -.Dd $Mdocdate: November 25 2014 $ +.Dd $Mdocdate: November 27 2014 $ .Dt MANDOC 1 .Os .Sh NAME @@ -1396,6 +1396,17 @@ The indicated request or macro has too few or too many The syntax tree will contain the wrong number of arguments as given. Formatting behaviour depends on the specific request or macro in question. Note that the same message may also occur as a WARNING, see above. +.It Sy "NOT IMPLEMENTED: Bd -file" +.Pq mdoc +For security reasons, the +.Ic \&Bd +macro does not support the +.Fl file +argument. +By requesting the inclusion of a sensitive file, a malicious document +might otherwise trick a privileged user into inadvertently displaying +the file on the screen, revealing the file content to bystanders. +The argument is ignored including the file name following it. .It Sy "missing list type, using -item" .Pq mdoc A @@ -1484,17 +1495,6 @@ cannot handle input files larger than its arbitrary si of 2^31 bytes (2 Gigabytes). Since useful manuals are always small, this is not a problem in practice. Parsing is aborted as soon as the condition is detected. -.It Sy "NOT IMPLEMENTED: Bd -file" -.Pq mdoc -For security reasons, the -.Ic \&Bd -macro does not support the -.Fl file -argument. -By requesting the inclusion of a sensitive file, a malicious document -might otherwise trick a privileged user into inadvertently displaying -the file on the screen, revealing the file content to bystanders. -The parser exits immediately. .It Sy "NOT IMPLEMENTED: .so with absolute path or \(dq..\(dq" .Pq roff For security reasons,