diff options
author | Jarkko Hietaniemi <jhi@iki.fi> | 2003-07-10 23:23:38 +0000 |
---|---|---|
committer | Jarkko Hietaniemi <jhi@iki.fi> | 2003-07-10 23:23:38 +0000 |
commit | 183c3da10ba46f0626790e1aa75f641397137480 (patch) | |
tree | 34d489cd7bb0bf85b830a006b35ed2e5e597007b /perl.c | |
parent | 672f6857cebebb4a4b84c7582c198e82837794f7 (diff) | |
download | perl-183c3da10ba46f0626790e1aa75f641397137480.tar.gz |
Check PERL_HASH_SEED even when tainted.
p4raw-id: //depot/perl@20134
Diffstat (limited to 'perl.c')
-rw-r--r-- | perl.c | 6 |
1 files changed, 1 insertions, 5 deletions
@@ -901,11 +901,7 @@ setuid perl scripts securely.\n"); /* [perl #22371] Algorimic Complexity Attack on Perl 5.6.1, 5.8.0 * This MUST be done before any hash stores or fetches take place. */ { - bool earlytaint = doing_taint(argc, argv, env); - char *s = NULL; - - if (!earlytaint) - s = PerlEnv_getenv("PERL_HASH_SEED"); + char *s = PerlEnv_getenv("PERL_HASH_SEED"); if (s) while (isSPACE(*s)) s++; if (s && isDIGIT(*s)) |