Bug 517502: The Security patch in 3.0.9 broke some WebService Bug.create parameters...

diff --git a/Bugzilla/WebService/Bug.pm b/Bugzilla/WebService/Bug.pm
index 480e5fb96e75887eaecfeb209d9c3f58381b8fc9..75f8f50938025e371bfd8c7d0680e44dd118a558 100644 (file)
--- a/Bugzilla/WebService/Bug.pm
+++ b/Bugzilla/WebService/Bug.pm
@@ -114,7 +114,7 @@ sub create {
     foreach my $field (keys %$params) {
         my $field_name = FIELD_MAP->{$field} || $field;
         # Prevent SQL Injection via key names.
-        _check_valid_field($field);
+        _check_valid_field($field_name);
         $field_values{$field_name} = $params->{$field}; 
     }