diff options
author | yugui <yugui@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2008-10-31 13:56:15 +0000 |
---|---|---|
committer | yugui <yugui@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2008-10-31 13:56:15 +0000 |
commit | a28ff68b5c1e02e461c1041a2d426beba8558d2a (patch) | |
tree | 499ebc408f7ceb2aefdbfecf4108142da94655a9 | |
parent | 9ebb8799041fe9ad3064dbfa32d1f8ba53d964ab (diff) |
merged r20074 from trunk into ruby_1_9_1.
* dir.c (dir_globs): need taint check. reported by steve
<oksteev at gmail.com>
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_9_1@20082 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
-rw-r--r-- | ChangeLog | 5 | ||||
-rw-r--r-- | dir.c | 2 |
2 files changed, 6 insertions, 1 deletions
@@ -1,3 +1,8 @@ +Fri Oct 31 12:51:25 2008 Yukihiro Matsumoto <matz@ruby-lang.org> + + * dir.c (dir_globs): need taint check. reported by steve + <oksteev at gmail.com> + Fri Oct 31 12:42:45 2008 wanabe <s.wanabe@gmail.com> * array.c (rb_ary_decrement_share): fix to work recycling @@ -1571,7 +1571,7 @@ dir_globs(long argc, VALUE *argv, int flags) for (i = 0; i < argc; ++i) { int status; VALUE str = argv[i]; - StringValue(str); + SafeStringValue(str); status = push_glob(ary, str, flags); if (status) GLOB_JUMP_TAG(status); } |