pkgsrc-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: postgrey and perl-5.18.0



On Mon, Jul 15, 2013 at 03:54:26AM +0000, Valeriy E. Ushakov wrote:
> Thomas Klausner <wiz%netbsd.org@localhost> wrote:
> 
> >> Thanks to moof@ for the hint.  pidfile argument is tainted.  dbdir is
> >> too, but it's untained at line 550, so I just added after that:
> >> 
> >>     # XXX: untaint pidfile
> >>     if($opt{pidfile}) { 
> >>         $opt{pidfile} =~ /^(.*)$/; $opt{pidfile} = $1;
> >>     }
> >> 
> >> and it works.
> > 
> > I've tried making that a patch for pkgsrc and including it in the
> > package. Please check if I understood correctly, and feed it upstream
> > in case there still is one.
> 
> This has been reported already as
> https://github.com/schweikert/postgrey/issues/3

That's half of what I meant.
I've added your patch there, that's the other half.

Cheers,
 Thomas


Home | Main Index | Thread Index | Old Index