Bug 660502: (CVE-2011-2977) [SECURITY] Temporary files for uploaded attachments are...

r=glob a=LpSolit

diff --git a/Bugzilla/Attachment.pm b/Bugzilla/Attachment.pm
index 79f7b915e4baf6186ffb61b447b176347a8fd081..c111e046a9393e15749851556f9bbffe69eb58d6 100644 (file)
--- a/Bugzilla/Attachment.pm
+++ b/Bugzilla/Attachment.pm
@@ -571,6 +571,7 @@ sub _check_data {
             local $/;
             my $fh = $params->{data};
             $data = <$fh>;
+            close $fh;
         }
     }
     Bugzilla::Hook::process('attachment_process_data', { data       => \$data,