Eliminating PL_suidscript is more tricky, and requires changing the

prototype of Perl_moreswitches.

p4raw-id: //depot/perl@27070

1 files changed, 6 insertions, 1 deletions

diff --git a/toke.c b/toke.c
index 8f01720491..df89130abe 100644
--- a/toke.c
+++ b/toke.c
@@ -3008,7 +3008,12 @@ Perl_yylex(pTHX)
 				Perl_croak(aTHX_ "Too late for \"-%.*s\" option",
 				      (int)(d - m), m);
 			    }
-			    d = moreswitches(d);
+			    /* Given that these switches are within the script,
+			       then it is not unsafe to allow them even within
+			       a suidperl fd script. Hence pass in the
+			       suidscript flag as -1, irrespective of what we
+			       really are.  */
+			    d = moreswitches(d, -1);
 			} while (d);
 			if (PL_doswitches && !switches_done) {
 			    int argc = PL_origargc;