Fix for RT #52552.

This patch only taints for pack('a'/'A') which was the original bug. I
guess the previous behaviour (pre-5.10.0) tainted on all tainted input.
That more general behaviour may be recoverable - not sure what we want.

1 files changed, 1 insertions, 0 deletions

diff --git a/pp_pack.c b/pp_pack.c
index 31cc8eb25f..72a96666cf 100644
--- a/pp_pack.c
+++ b/pp_pack.c
@@ -2798,6 +2798,7 @@ S_pack_rec(pTHX_ SV *cat, tempsym_t* symptr, SV **beglist, SV **endlist )
 	    }
 	    memset(cur, datumtype == 'A' ? ' ' : '\0', len);
 	    cur += len;
+	    SvTAINT(cat);
 	    break;
 	}
 	case 'B':