Forbid using tainted formats in printf and sprintf

p4raw-id: //depot/perl@29225

1 files changed, 2 insertions, 0 deletions

diff --git a/pp.c b/pp.c
index 43e400bb6e..a9ca2366a6 100644
--- a/pp.c
+++ b/pp.c
@@ -3310,6 +3310,8 @@ PP(pp_index)
 PP(pp_sprintf)
 {
     dVAR; dSP; dMARK; dORIGMARK; dTARGET;
+    if (SvTAINTED(MARK[1]))
+	TAINT_PROPER("sprintf");
     do_sprintf(TARG, SP-MARK, MARK+1);
     TAINT_IF(SvTAINTED(TARG));
     SP = ORIGMARK;