Bug 109690: Check $bug before using it.

r=justdave,gerv

diff --git a/long_list.cgi b/long_list.cgi
index 0cde1e93a7009ac9ad680e9b8f30634ddc4247c7..63120e5eb12ca833d0a62c636d2184220bd5e781 100755 (executable)
--- a/long_list.cgi
+++ b/long_list.cgi
@@ -73,6 +73,7 @@ where assign.userid = bugs.assigned_to and report.userid = bugs.reporter and";
 
 $::FORM{'buglist'} = "" unless exists $::FORM{'buglist'};
 foreach my $bug (split(/:/, $::FORM{'buglist'})) {
+    if (!detaint_natural($bug)) || next;
     SendSQL(SelectVisible("$generic_query bugs.bug_id = $bug",
                           $::userid, $::usergroupset));