You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@spamassassin.apache.org by jh...@apache.org on 2017/02/13 02:16:44 UTC

svn commit: r1782717 - /spamassassin/branches/3.4/spamc/configure.pl

Author: jhardin
Date: Mon Feb 13 02:16:44 2017
New Revision: 1782717

URL: http://svn.apache.org/viewvc?rev=1782717&view=rev
Log:
Fix bug#7367: Don't assume cwd (".") is in @INC, it may be removed for security reasons - see CVE-2016-1238

Modified:
    spamassassin/branches/3.4/spamc/configure.pl

Modified: spamassassin/branches/3.4/spamc/configure.pl
URL: http://svn.apache.org/viewvc/spamassassin/branches/3.4/spamc/configure.pl?rev=1782717&r1=1782716&r2=1782717&view=diff
==============================================================================
--- spamassassin/branches/3.4/spamc/configure.pl (original)
+++ spamassassin/branches/3.4/spamc/configure.pl Mon Feb 13 02:16:44 2017
@@ -66,7 +66,7 @@ print join(' ', $Config{'perlpath'}, "ve
   # Do the same thing as for the preprocessor below.
   package version_h;
   my $Z = $0;
-  local $0    = "version.h.pl";
+  local $0    = "./version.h.pl";
   local @ARGV = ();
   # Got to check for defined because the script returns shell error level!
   unless (defined do $0) {