byterazor/qpsmtpd
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Sanitize spamd_sock path for perl taint mode

Browse Source
This commit is contained in:
Markus Ullmann 2013-03-20 01:16:09 +01:00 committed by Matt Simerson
parent a90c881ae5
commit c0b36c5cb4
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
plugins/spamassassin
View File

@ -314,6 +314,10 @@ sub connect_to_spamd_socket {
return; return;
}; };
# Sanitize for use with taint mode
$socket =~ /^([\w\/.-]+)$/;
$socket = $1;
socket(my $SPAMD, PF_UNIX, SOCK_STREAM, 0) or do { socket(my $SPAMD, PF_UNIX, SOCK_STREAM, 0) or do {
$self->log(LOGERROR, "Could not open socket: $!"); $self->log(LOGERROR, "Could not open socket: $!");
return; return;