From aa802e6844930228dd6135767b41516c6bf42f72 Mon Sep 17 00:00:00 2001
From: Radu Greab <radu@yx.ro>
Date: Thu, 4 Sep 2008 11:41:48 +0000
Subject: [PATCH] Untaint the value of the --interface option.

git-svn-id: https://svn.perl.org/qpsmtpd/trunk@940 958fd67b-6ff1-0310-b445-bb7760255be9
---
 Changes         | 3 +++
 qpsmtpd-prefork | 1 +
 2 files changed, 4 insertions(+)

diff --git a/Changes b/Changes
index 26d5239..2f25f0c 100644
--- a/Changes
+++ b/Changes
@@ -1,3 +1,6 @@
+  prefork: untaint the value of the --interface option (reported by
+  Diego d'Ambra)
+
   prefork: the children pool size was sometimes not adjusted immediately
   after the exit of children (reported by Diego d'Ambra)
 
diff --git a/qpsmtpd-prefork b/qpsmtpd-prefork
index 4d1daa0..ecc19b4 100755
--- a/qpsmtpd-prefork
+++ b/qpsmtpd-prefork
@@ -118,6 +118,7 @@ GetOptions(
   ) || &usage;
 
 if ($user =~ /^([\w\-]+)$/) { $user = $1 } else { &usage }
+if ($d_addr =~ /^(\[.*\]|[\w\-.]+)$/) { $d_addr = $1 } else { &usage }
 
 # set max from ip to max number of children if option is set to disabled
 $maxconnip = $max_children if ($maxconnip == 0);