Merge pull request #2 from jokey2k/patch-2

Sanitize spamd_sock path for perl taint mode
2013-03-22 22:18:32 -07:00 · 2013-03-22 22:18:32 -07:00 · a11692675f
commit a11692675f
parent a0212347bf f198157e92
1 changed files with 4 additions and 0 deletions
--- a/plugins/spamassassin
+++ b/plugins/spamassassin
@ -314,6 +314,10 @@ sub connect_to_spamd_socket {
        return;
    };

+    # Sanitize for use with taint mode
+    $socket =~ /^([\w\/.-]+)$/;
+    $socket = $1;
+
    socket(my $SPAMD, PF_UNIX, SOCK_STREAM, 0) or do {
        $self->log(LOGERROR, "Could not open socket: $!");
        return;