diff options
| author | Curtis Poe <cp@onsitetech.com> | 2002-05-21 04:17:40 -0700 |
|---|---|---|
| committer | Jarkko Hietaniemi <jhi@iki.fi> | 2002-05-21 22:59:58 +0000 |
| commit | 86a5040c5a91f7c3b776b243300d5415c6c58021 (patch) | |
| tree | 3a663567259ac08c71f1b6e769033b9b3013a302 /lib/shellwords.pl | |
| parent | 074a95adfa45efa1e16eb9ff76aeb8dbab99826c (diff) | |
| download | perl-86a5040c5a91f7c3b776b243300d5415c6c58021.tar.gz | |
Re: [Patch] for problem with shellwords.pl
From: "Curtis Poe" <cp@onsitetech.com>
Date: Tue, 21 May 2002 11:17:40 -0700
Message-ID: <015c01c200f3$cb691670$1a01a8c0@ot.onsitetech.com>
Subject: [Patch] for security problem with Text::ParseWords
From: "Curtis Poe" <cp@onsitetech.com>
Date: Tue, 21 May 2002 15:10:18 -0700
Message-ID: <022f01c20114$4b3c4550$1a01a8c0@ot.onsitetech.com>
p4raw-id: //depot/perl@16727
Diffstat (limited to 'lib/shellwords.pl')
| -rw-r--r-- | lib/shellwords.pl | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/shellwords.pl b/lib/shellwords.pl index 1c45a5a090..ca7dc7ec23 100644 --- a/lib/shellwords.pl +++ b/lib/shellwords.pl @@ -17,6 +17,7 @@ sub shellwords { while ($_ ne '') { $field = ''; for (;;) { + use re 'taint'; # leave strings tainted if (s/^"(([^"\\]|\\.)*)"//) { ($snippet = $1) =~ s#\\(.)#$1#g; } |