You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2007/01/30 22:55:45 UTC
svn commit: r501592 - /spamassassin/trunk/lib/Mail/SpamAssassin/Util.pm
Author: jm
Date: Tue Jan 30 13:55:45 2007
New Revision: 501592
URL: http://svn.apache.org/viewvc?view=rev&rev=501592
Log:
File::Spec was too paranoid; it ignores TMPDIR entirely if taint mode is active, hence we never used TMPDIR at all. fix
Modified:
spamassassin/trunk/lib/Mail/SpamAssassin/Util.pm
Modified: spamassassin/trunk/lib/Mail/SpamAssassin/Util.pm
URL: http://svn.apache.org/viewvc/spamassassin/trunk/lib/Mail/SpamAssassin/Util.pm?view=diff&rev=501592&r1=501591&r2=501592
==============================================================================
--- spamassassin/trunk/lib/Mail/SpamAssassin/Util.pm (original)
+++ spamassassin/trunk/lib/Mail/SpamAssassin/Util.pm Tue Jan 30 13:55:45 2007
@@ -943,7 +943,8 @@
# thanks to http://www2.picante.com:81/~gtaylor/autobuse/ for this code
sub secure_tmpfile {
- my $tmpdir = Mail::SpamAssassin::Util::untaint_file_path(File::Spec->tmpdir());
+ my $tmpdir = Mail::SpamAssassin::Util::untaint_file_path(
+ $ENV{'TMPDIR'} || File::Spec->tmpdir());
if (!$tmpdir) {
# Note: we would prefer to keep this fatal, as not being able to