/[smeserver]/rpms/e-smith-email/sme10/e-smith-email-5.6.0-bz11716-untaint.patch
ViewVC logotype

Diff of /rpms/e-smith-email/sme10/e-smith-email-5.6.0-bz11716-untaint.patch

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph | View Patch Patch

Revision 1.2 by jpp, Sat Apr 16 16:32:00 2022 UTC Revision 1.3 by jpp, Thu May 19 04:24:52 2022 UTC
# Line 15  diff -Nur --no-dereference e-smith-email Line 15  diff -Nur --no-dereference e-smith-email
15    
16       # Untaint $pseudonym before use in system()       # Untaint $pseudonym before use in system()
17  -    ($pseudonym) = ($pseudonym =~ /(.+)/);  -    ($pseudonym) = ($pseudonym =~ /(.+)/);
18  +    ($pseudonym) = ($pseudonym =~ /([\w\p{L}]+.)/);  +    ($pseudonym) = ($pseudonym =~ /([\w\p{L}.]+)/);
19       system( "/sbin/e-smith/signal-event", "pseudonym-modify", "$pseudonym",)       system( "/sbin/e-smith/signal-event", "pseudonym-modify", "$pseudonym",)
20           == 0 or $msg = "Error occurred while modifying pseudonym.";           == 0 or $msg = "Error occurred while modifying pseudonym.";
21    
# Line 24  diff -Nur --no-dereference e-smith-email Line 24  diff -Nur --no-dereference e-smith-email
24    
25       # Untaint $pseudonym before use in system()       # Untaint $pseudonym before use in system()
26  -    ($pseudonym) = ($pseudonym =~ /(.+)/);  -    ($pseudonym) = ($pseudonym =~ /(.+)/);
27  +    ($pseudonym) = ($pseudonym =~ /([\w\p{L}]+.)/);  +    ($pseudonym) = ($pseudonym =~ /([\w\p{L}.]+)/);
28       system( "/sbin/e-smith/signal-event", "pseudonym-delete", "$pseudonym") == 0       system( "/sbin/e-smith/signal-event", "pseudonym-delete", "$pseudonym") == 0
29           or $msg = "Error occurred while removing pseudonym.";           or $msg = "Error occurred while removing pseudonym.";
30    

Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters
admin@koozali.org
 ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed