kotovalexarian-likes-github/ruby--ruby
1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2022-11-09 12:17:21 -05:00
Code Releases Activity

* io.c (rb_f_syscall): should check argument string taint before

Browse source 
invoking system calls.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8@28294 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
This commit is contained in:
matz 2010-06-12 01:04:31 +00:00
parent 52ae6c71b5
commit ebee527699
2 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
ChangeLog
View file

@ -1,3 +1,8 @@
Sat Jun 12 10:02:26 2010 Yukihiro Matsumoto <matz@ruby-lang.org>
* io.c (rb_f_syscall): should check argument string taint before
invoking system calls.
Thu Jun 10 14:45:28 2010 KOSAKI Motohiro <kosaki.motohiro@gmail.com>
* ext/dl/dl.c (rb_dl_strdup): strdup() only allocates a buffer of

2
io.c
View file

@ -5250,7 +5250,7 @@ rb_f_syscall(argc, argv)
VALUE v = rb_check_string_type(*argv);
if (!NIL_P(v)) {
StringValue(v);
SafeStringValue(v);
rb_str_modify(v);
arg[i] = (unsigned long)StringValueCStr(v);
}