From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Date: Thu, 26 Apr 2007 21:19:12 +0400 From: Alexey Tourbin To: ALT Linux Sisyphus discussion list Message-ID: <20070426171912.GD13800@solemn.turbinal> Mail-Followup-To: ALT Linux Sisyphus discussion list References: <461B8FE8.6040709@mmascience.ru> <462CA531.8050607@mmascience.ru> <20070426113505.GU25908@solemn.turbinal> <4630AFCE.8050304@tangramltd.com> <20070426140507.GV25908@solemn.turbinal> <4630BDB8.7070906@tangramltd.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="lkTb+7nhmha7W+c3" Content-Disposition: inline In-Reply-To: <4630BDB8.7070906@tangramltd.com> Subject: Re: [sisyphus] =?koi8-r?b?V0FSTklORzogYW1hdmlzZC1uZXcgySDLz8TJ0s/X?= =?koi8-r?b?y8kg0MnTxc0=?= X-BeenThere: sisyphus@lists.altlinux.org X-Mailman-Version: 2.1.9rc1 Precedence: list Reply-To: ALT Linux Sisyphus discussion list List-Id: ALT Linux Sisyphus discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Apr 2007 17:20:55 -0000 Archived-At: List-Archive: List-Post: --lkTb+7nhmha7W+c3 Content-Type: text/plain; charset=koi8-r Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Apr 26, 2007 at 05:56:56PM +0300, Slava Dubrovskiy wrote: > Alexey Tourbin =D0=C9=DB=C5=D4: > >>=F5 =CD=C5=CE=D1 =D4=C5 =D6=C5 =CF=DB=C9=C2=CB=C9. =FE=D4=CF =CE=C1=C4= =CF =D3=C4=C5=CC=C1=D4=D8? > >> =20 > >=F0=D2=C9=CC=CF=D6=C9=D4=D8 "=D0=CF =D6=C9=D7=CF=CD=D5" =D7=CF=D4 =DC=D4= =CF=D4 =D0=C1=D4=DE, =C9 =D0=CF=CE=D1=D4=D8, =D7 =CB=C1=CB=CF=CD =CD=C5=D3= =D4=C5 > >=D0=C5=D2=C5=C4=C1=C5=D4=D3=D1 =D0=D2=CF=D4=D5=C8=DB=C5=C5 =C9=CD=D1 =C6= =C1=CA=CC=C1. =E9 =D0=CF=DE=C5=CD=D5 =CF=CE=CF =D0=D2=CF=D4=D5=C8=CC=CF. > > > >--- /usr/lib/perl5/i386-linux/IO/File.pm- 2007-04-25 13:49:44 +0000 > >+++ /usr/lib/perl5/i386-linux/IO/File.pm 2007-04-26 14:02:45 +0000 > >@@ -177,6 +177,11 @@ sub open { > > my ($mode, $perms) =3D @_[2, 3]; > > if ($mode =3D~ /^\d+$/) { > > defined $perms or $perms =3D 0666; > >+ use Scalar::Util qw(tainted): =F3 =D4=C1=CB=CF=CA =D3=C9=CE=D4=C1=CB=D3=C9=DE=C5=D3=CB=CF=CA =CF=DB=C9=C2= =CB=CF=CA (=C4=D7=CF=C5=D4=CF=DE=C9=C5 =CE=C1 =CB=CF=CE=C3=C5) =D0=C5=D2=CC= =D0=D2=CF=D3=D4=CF =D3=C5=C7=C6=CF=CC=D4=C9=D4=D3=D1. :( =F0=D2=C9=DE=C5=CD =D5=D6=C5 =C4=C1= =D7=CE=CF, =D7=D2=CF=C4=C5 =C2=D9 =CE=C1=DE=C9=CE=C1=D1 =D3 5.8.1. > >+ if (tainted $file) { > >+ require Carp; > >+ Carp::cluck("file $file tainted"); > >+ } > > return sysopen($fh, $file, $mode, $perms); > > } elsif ($mode =3D~ /:/) { > > return open($fh, $mode, $file) if @_ =3D=3D 3; > > =20 > =FA=C1=D7=D4=D2=C1 =D3 =D5=D4=D2=C1 =C2=D5=C4=D5 =DC=CB=D3=D0=C5=D2=C9=CD= =C5=CE=D4=C9=D2=CF=D7=C1=D4=D8. =E1 =D4=CF =D5=CA=C4=D5, =C1 =D3=C5=D2=D7= =C5=D2 =CC=D1=D6=C5=D4... =F5 =CD=C5=CE=D1 =D4=D5=D4 =C5=D3=D4=D8 =CF=C4=CE=C1 =D7=C5=D2=D3=C9=D1, = =DE=D4=CF 'use re "taint"' =D3=D4=C1=CC =CE=C5=D0=D2=C1=D7=C9=CC=D8=CE=CF =D2=C1=C2=CF=D4=C1=D4=D8, =C2=D5=C4=D5 =CB=CF=D7=D9=D2=D1=D4=D8. --lkTb+7nhmha7W+c3 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFGMN8QfBKgtDjnu0YRAk/JAKCTifx7RtZBq58FvmtbpC7q4q+LoQCbBRMe 0OGLeuxZEqsBo0JRTziaQHw= =KP7H -----END PGP SIGNATURE----- --lkTb+7nhmha7W+c3--