Change 11410 by nick@camel-linux on 2001/07/19 06:39:35
Subject: Security hole in taint checking in open()
From: [EMAIL PROTECTED]
Date: Thu, 19 Jul 2001 00:03:46 -0700 (PDT)
Message-Id: <[EMAIL PROTECTED]>
Affected files ...
... //depot/perl/doio.c#165 edit
Differences ...
==== //depot/perl/doio.c#165 (text) ====
Index: perl/doio.c
--- perl/doio.c.~1~ Thu Jul 19 00:45:06 2001
+++ perl/doio.c Thu Jul 19 00:45:06 2001
@@ -235,6 +235,7 @@
if ((*type == IoTYPE_RDWR) && /* scary */
(*(type+1) == IoTYPE_RDONLY || *(type+1) == IoTYPE_WRONLY) &&
((!num_svs || (tend > type+1 && tend[-1] != IoTYPE_PIPE)))) {
+ TAINT_PROPER("open");
mode[1] = *type++;
writing = 1;
}
End of Patch.
