You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by mm...@apache.org on 2010/04/18 23:51:58 UTC
svn commit: r935419 -
/spamassassin/trunk/lib/Mail/SpamAssassin/DBBasedAddrList.pm
Author: mmartinec
Date: Sun Apr 18 21:51:57 2010
New Revision: 935419
URL: http://svn.apache.org/viewvc?rev=935419&view=rev
Log:
Untaint a list of modules given by an auto_whitelist_db_modules
configuration directive, avoiding a taint failure in DBBasedAddrList
Modified:
spamassassin/trunk/lib/Mail/SpamAssassin/DBBasedAddrList.pm
Modified: spamassassin/trunk/lib/Mail/SpamAssassin/DBBasedAddrList.pm
URL: http://svn.apache.org/viewvc/spamassassin/trunk/lib/Mail/SpamAssassin/DBBasedAddrList.pm?rev=935419&r1=935418&r2=935419&view=diff
==============================================================================
--- spamassassin/trunk/lib/Mail/SpamAssassin/DBBasedAddrList.pm (original)
+++ spamassassin/trunk/lib/Mail/SpamAssassin/DBBasedAddrList.pm Sun Apr 18 21:51:57 2010
@@ -24,7 +24,7 @@ use re 'taint';
use Fcntl;
use Mail::SpamAssassin::PersistentAddrList;
-use Mail::SpamAssassin::Util;
+use Mail::SpamAssassin::Util qw(untaint_var);
use Mail::SpamAssassin::Logger;
our @ISA = qw(Mail::SpamAssassin::PersistentAddrList);
@@ -54,6 +54,7 @@ sub new_checker {
};
my @order = split (' ', $main->{conf}->{auto_whitelist_db_modules});
+ untaint_var(\@order);
my $dbm_module = Mail::SpamAssassin::Util::first_available_module (@order);
if (!$dbm_module) {
die "auto-whitelist: cannot find a usable DB package from auto_whitelist_db_modules: " .