diff options
| author | Larry Wall <lwall@netlabs.com> | 1993-10-07 23:00:00 +0000 |
|---|---|---|
| committer | Larry Wall <lwall@netlabs.com> | 1993-10-07 23:00:00 +0000 |
| commit | 79072805bf63abe5b5978b5928ab00d360ea3e7f (patch) | |
| tree | 96688fcd69f9c8d2110e93c350b4d0025eaf240d /taint.c | |
| parent | e334a159a5616cab575044bafaf68f75b7bb3a16 (diff) | |
| download | perl-79072805bf63abe5b5978b5928ab00d360ea3e7f.tar.gz | |
perl 5.0 alpha 2perl-5a2
[editor's note: from history.perl.org. The sparc executables
originally included in the distribution are not in this commit.]
Diffstat (limited to 'taint.c')
| -rw-r--r-- | taint.c | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/taint.c b/taint.c new file mode 100644 index 0000000000..5178ee2250 --- /dev/null +++ b/taint.c @@ -0,0 +1,34 @@ +void +taint_proper(f, s) +char *f; +char *s; +{ + DEBUG_u(fprintf(stderr,"%s %d %d %d\n",s,tainted,uid, euid)); + if (tainted && (!euid || euid != uid || egid != gid || taintanyway)) { + if (!unsafe) + fatal(f, s); + else if (dowarn) + warn(f, s); + } +} + +void +taint_env() +{ + SV** svp; + + svp = hv_fetch(GvHVn(envgv),"PATH",4,FALSE); + if (!svp || *svp == &sv_undef || (*svp)->sv_tainted) { + tainted = 1; + if ((*svp)->sv_tainted == 2) + taint_proper("Insecure directory in %s", "PATH"); + else + taint_proper("Insecure %s", "PATH"); + } + svp = hv_fetch(GvHVn(envgv),"IFS",3,FALSE); + if (svp && *svp != &sv_undef && (*svp)->sv_tainted) { + tainted = 1; + taint_proper("Insecure %s", "IFS"); + } +} + |