develooper Front page | perl.perl5.porters | Postings from October 2003

Re: [PATCH] Re: [perl #24291] Taint checking against the wrong environment

Thread Previous | Thread Next
From:
Rafael Garcia-Suarez
Date:
October 27, 2003 13:10
Subject:
Re: [PATCH] Re: [perl #24291] Taint checking against the wrong environment
Message ID:
20031027221543.16d547e9.rgarciasuarez@free.fr
Ton Hospel wrote:
> In article <20031027160008.3b3377b_.rgarciasuarez@_ree._r>,
> 	Rafael Garcia-Suarez <rgarciasuarez@free.fr> writes:
> > Ton Hospel wrote:
> >>
> >> If I understand correctly, the croak happens not on the localization
> >> of ENV, but when the system() tries to use it ?
> >
> > Yes. I added the check for aliased *ENV in the same routine that
> > checks for insecure $ENV{XYZ}. (It's thus only called with taint
> > checks turned on.)
> 
> Perfect.

I've then applied the patch to bleadperl (21563).
Thread Previous | Thread Next

nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About