Bug 660502: (CVE-2011-2977) [SECURITY] Temporary files for uploaded attachments are...

r=glob a=LpSolit

diff --git a/Bugzilla/Attachment.pm b/Bugzilla/Attachment.pm
index a2abebb8d9f768dc5b2ee86d89d9edf6659590ed..d6037b3e79898482a976b6891f59595abe07f94d 100644 (file)
--- a/Bugzilla/Attachment.pm
+++ b/Bugzilla/Attachment.pm
@@ -560,6 +560,7 @@ sub _check_data {
             local $/;
             my $fh = $params->{data};
             $data = <$fh>;
+            close $fh;
         }
     }
     Bugzilla::Hook::process('attachment_process_data', { data       => \$data,