]> git.ipfire.org Git - thirdparty/bugzilla.git/commitdiff
Bug 122418 pt2 - obsoleting a patch from the create attachment screen gave
authorbbaetz%student.usyd.edu.au <>
Tue, 5 Feb 2002 08:11:48 +0000 (08:11 +0000)
committerbbaetz%student.usyd.edu.au <>
Tue, 5 Feb 2002 08:11:48 +0000 (08:11 +0000)
a taint error.

attachment.cgi

index 368ad702e2c0c932619f9a4ec5944d6d6a891c9e..f58844835b485c0ce2436d734d44b909f56b0080 100755 (executable)
@@ -314,7 +314,7 @@ sub validateObsolete
   # Make sure the attachment id is valid and the user has permissions to view
   # the bug to which it is attached.
   foreach my $attachid (@{$::MFORM{'obsolete'}}) {
-    $attachid =~ /^[1-9][0-9]*$/
+    detaint_natural($attachid)
       || DisplayError("The attachment number of one of the attachments 
            you wanted to obsolete is invalid.") 
         && exit;