summaryrefslogtreecommitdiffstats
path: root/spampd/untaint-pidfile.patch
diff options
context:
space:
mode:
Diffstat (limited to 'spampd/untaint-pidfile.patch')
-rw-r--r--spampd/untaint-pidfile.patch28
1 files changed, 28 insertions, 0 deletions
diff --git a/spampd/untaint-pidfile.patch b/spampd/untaint-pidfile.patch
new file mode 100644
index 0000000..cd93ad0
--- /dev/null
+++ b/spampd/untaint-pidfile.patch
@@ -0,0 +1,28 @@
+commit 662d82ec2badc34f4de561021ea714afe1e1bddc
+Author: Florian Pritz <bluewind@xinu.at>
+Date: Tue May 28 20:20:44 2013 +0200
+
+ untaint $pidfile to prevent errors when opening it
+
+ For some reason that worked before perl 5.18, but I don't care enough
+ to figure out why. Since we trust the CLI args untaining anything
+ should be ok.
+
+ Signed-off-by: Florian Pritz <bluewind@xinu.at>
+---
+ spampd | 2 ++
+ 1 file changed, 2 insertions(+)
+
+diff --git a/spampd.pl b/spampd.pl
+index 7b1f234..53161d9 100644
+--- a/spampd
++++ b/spampd
+@@ -937,6 +937,8 @@ if ( !$options{logsock} ) {
+ };
+ }
+
++# untaint pidfile
++($pidfile) = ($pidfile =~ /^(.+)$/);
+
+ my $server = bless {
+ server => {host => $host,