diff options
Diffstat (limited to 'spampd/untaint-pidfile.patch')
-rw-r--r-- | spampd/untaint-pidfile.patch | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/spampd/untaint-pidfile.patch b/spampd/untaint-pidfile.patch new file mode 100644 index 0000000..cd93ad0 --- /dev/null +++ b/spampd/untaint-pidfile.patch @@ -0,0 +1,28 @@ +commit 662d82ec2badc34f4de561021ea714afe1e1bddc +Author: Florian Pritz <bluewind@xinu.at> +Date: Tue May 28 20:20:44 2013 +0200 + + untaint $pidfile to prevent errors when opening it + + For some reason that worked before perl 5.18, but I don't care enough + to figure out why. Since we trust the CLI args untaining anything + should be ok. + + Signed-off-by: Florian Pritz <bluewind@xinu.at> +--- + spampd | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/spampd.pl b/spampd.pl +index 7b1f234..53161d9 100644 +--- a/spampd ++++ b/spampd +@@ -937,6 +937,8 @@ if ( !$options{logsock} ) { + }; + } + ++# untaint pidfile ++($pidfile) = ($pidfile =~ /^(.+)$/); + + my $server = bless { + server => {host => $host, |