diff options
| author | Chris 'BinGOs' Williams <chris@bingosnet.co.uk> | 2011-10-05 09:55:23 +0100 |
|---|---|---|
| committer | Chris 'BinGOs' Williams <chris@bingosnet.co.uk> | 2011-10-05 12:12:59 +0100 |
| commit | 02e7ec6dbb7a5c208d6e96f6d2b49bccca1c6185 (patch) | |
| tree | 3b9729f9fdab5a19326fe2564d5f0bc01fd050e1 /cpan/Module-Load/lib | |
| parent | d64af352a39bb6122c0e7bc22aad45b6b928dcca (diff) | |
| download | perl-02e7ec6dbb7a5c208d6e96f6d2b49bccca1c6185.tar.gz | |
Update Module-Load to CPAN version 0.22
[DELTA]
Changes for 0.22 Tue Oct 4 21:44:32 2011
============================================
* Resolve possible security problem [http://goo.gl/YzHRU]
where a '::' prefixed module can 'jump' out of @INC
Diffstat (limited to 'cpan/Module-Load/lib')
| -rw-r--r-- | cpan/Module-Load/lib/Module/Load.pm | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/cpan/Module-Load/lib/Module/Load.pm b/cpan/Module-Load/lib/Module/Load.pm index 7087b5e8bf..3a83c386a2 100644 --- a/cpan/Module-Load/lib/Module/Load.pm +++ b/cpan/Module-Load/lib/Module/Load.pm @@ -1,6 +1,6 @@ package Module::Load; -$VERSION = '0.20'; +$VERSION = '0.22'; use strict; use File::Spec (); @@ -49,6 +49,8 @@ sub _to_file{ ## trailing blanks ignored by default. [rt #69886] my @parts = split /::/, $_, -1; + ## make sure that we can't hop out of @INC + shift @parts if @parts && !$parts[0]; ### because of [perl #19213], see caveats ### my $file = $^O eq 'MSWin32' |