byterazor/qpsmtpd
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #2 from jokey2k/patch-2

Browse Source 
Sanitize spamd_sock path for perl taint mode
This commit is contained in:
Matt Simerson 2013-03-22 22:18:32 -07:00
commit a11692675f
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
plugins/spamassassin
View File

@ -314,6 +314,10 @@ sub connect_to_spamd_socket {
return; return;
}; };
# Sanitize for use with taint mode
$socket =~ /^([\w\/.-]+)$/;
$socket = $1;
socket(my $SPAMD, PF_UNIX, SOCK_STREAM, 0) or do { socket(my $SPAMD, PF_UNIX, SOCK_STREAM, 0) or do {
$self->log(LOGERROR, "Could not open socket: $!"); $self->log(LOGERROR, "Could not open socket: $!");
return; return;