MailScanner/v5
1
1
Fork 0
mirror of https://github.com/MailScanner/v5.git synced 2024-11-10 17:32:56 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions

FIX: Untaint the $safename var in unpack7zip

Browse source 
Prevent the taint error in open when the file is encrypted.
This commit is contained in:
Andrew Colin Kissa 2018-02-23 09:40:43 +02:00
parent c0dc8d8025
commit 86cde73a97
No known key found for this signature in database
GPG key ID: EA9171E4333F2952
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
common/usr/share/MailScanner/perl/MailScanner/Message.pm
View file

@ -3189,6 +3189,8 @@ sub Unpack7zip {
$nopathname = $name;
$nopathname =~ s/^.*\///;
$safename = $this->MakeNameSafe('r'.$nopathname,$explodeinto);
$safename =~ m|(.*)|;
$safename = $1;
$NameTwo = $safename;
$NameTwo = $1 if $NameTwo =~ /([^\/]+)$/;
#MailScanner::Log::InfoLog("UnPackRar: Member : %s", $member);