cvs commit: modperl/File File.pm

[dougm]

dougm       02/04/15 19:39:31

  Modified:    File     File.pm
  Log:
  fix taint issue with bleedperl
  
  Revision  Changes    Path
  1.7       +1 -1      modperl/File/File.pm
  
  Index: File.pm
  ===================================================================
  RCS file: /home/cvs/modperl/File/File.pm,v
  retrieving revision 1.6
  retrieving revision 1.7
  diff -u -r1.6 -r1.7
  --- File.pm   2 Mar 2000 01:57:46 -0000       1.6
  +++ File.pm   16 Apr 2002 02:39:31 -0000      1.7
  @@ -12,7 +12,6 @@
   
   my $TMPNAM = 'aaaaaa';
   my $TMPDIR = $ENV{'TMPDIR'} || $ENV{'TEMP'} || '/tmp';
  -($TMPDIR) = $TMPDIR =~ /^([^<>|;*]+)$/; #untaint
   my $Mode = Fcntl::O_RDWR()|Fcntl::O_EXCL()|Fcntl::O_CREAT();
   my $Perms = 0600;
    
  @@ -22,6 +21,7 @@
       my $r = Apache->request;
       while($limit--) {
           my $tmpfile = "$TMPDIR/${$}" . $TMPNAM++;
  +        ($tmpfile) = $tmpfile =~ /^([^<>|;*]+)$/; #untaint
           my $fh = $class->new;
        sysopen($fh, $tmpfile, $Mode, $Perms);
        $r->register_cleanup(sub { unlink $tmpfile }) if $r;