You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2007/09/19 01:25:36 UTC
svn commit: r577105 -
/spamassassin/trunk/lib/Mail/SpamAssassin/Plugin/BodyRuleBaseExtractor.pm
Author: jm
Date: Tue Sep 18 16:25:35 2007
New Revision: 577105
URL: http://svn.apache.org/viewvc?rev=577105&view=rev
Log:
this need to be untainted for sa-compile to operate
Modified:
spamassassin/trunk/lib/Mail/SpamAssassin/Plugin/BodyRuleBaseExtractor.pm
Modified: spamassassin/trunk/lib/Mail/SpamAssassin/Plugin/BodyRuleBaseExtractor.pm
URL: http://svn.apache.org/viewvc/spamassassin/trunk/lib/Mail/SpamAssassin/Plugin/BodyRuleBaseExtractor.pm?rev=577105&r1=577104&r2=577105&view=diff
==============================================================================
--- spamassassin/trunk/lib/Mail/SpamAssassin/Plugin/BodyRuleBaseExtractor.pm (original)
+++ spamassassin/trunk/lib/Mail/SpamAssassin/Plugin/BodyRuleBaseExtractor.pm Tue Sep 18 16:25:35 2007
@@ -488,6 +488,7 @@
$rule =~ s/(?<!\\)(\w)\?/\($1\|\)/gs;
my ($tmpf, $tmpfh) = Mail::SpamAssassin::Util::secure_tmpfile();
+ untaint_var(\$tmpf);
# attempt to find a safe regexp delimiter...
# TODO: would prob be easier to just read this from $rawrule
@@ -965,8 +966,8 @@
$perl = $Config{perlpath};
$perl =~ s|/[^/]*$|/$^X|;
}
- $perl =~ /^(.*)$/;
- return $1;
+ untaint_var(\$perl);
+ return $perl;
}
###########################################################################