From: Frédéric Buclin <LpSolit@gmail.com>
Date: Sat, 26 Mar 2016 23:30:17 +0000 (+0100)
Subject: Bug 987742 (part 2): correctly detaint $ENV{PATH} on Strawberry Perl
X-Git-Tag: release-5.1.1~45
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=a6562e03893e2d6f3c5719f4cc36e53067277959;p=thirdparty%2Fbugzilla.git

Bug 987742 (part 2): correctly detaint $ENV{PATH} on Strawberry Perl
---

diff --git a/Bugzilla.pm b/Bugzilla.pm
index fba6d2a04f..64cf15bb68 100644
--- a/Bugzilla.pm
+++ b/Bugzilla.pm
@@ -99,6 +99,7 @@ sub init_page {
                 my $c_path = $path = dirname($^X);
                 $c_path =~ s/\bperl\b(?=\\bin)/c/;
                 $path .= ";$c_path";
+                trick_taint($path);
             }
         }
         # Some environment variables are not taint safe