Merge branch 'master' of github.com:qpsmtpd-dev/qpsmtpd-dev

2013-03-23 01:20:36 -04:00 · 2013-03-23 01:20:36 -04:00 · 08da0fe5c5
commit 08da0fe5c5
parent 1a7f2c26a5 a11692675f
1 changed files with 4 additions and 0 deletions
--- a/plugins/spamassassin
+++ b/plugins/spamassassin
@ -314,6 +314,10 @@ sub connect_to_spamd_socket {
        return;
    };

+    # Sanitize for use with taint mode
+    $socket =~ /^([\w\/.-]+)$/;
+    $socket = $1;
+
    socket(my $SPAMD, PF_UNIX, SOCK_STREAM, 0) or do {
        $self->log(LOGERROR, "Could not open socket: $!");
        return;