Bug 382974: $duplicate can be set even when not marking a bug as a dupe (security...

diff --git a/process_bug.cgi b/process_bug.cgi
index bb0d608a5e2e6f535514f678e79634d179ab64c0..170fb87a530767665b207190a14de7c2f10a7a89 100755 (executable)
--- a/process_bug.cgi
+++ b/process_bug.cgi
@@ -951,7 +951,7 @@ $vars->{resolution} = $cgi->param('resolution') || '';
 Bugzilla::Bug->check_status_change_triggers($knob, \@idlist, $vars);
 
 # Some triggers require extra actions.
-$duplicate = $vars->{dup_id};
+$duplicate = $vars->{dup_id} if ($knob eq 'duplicate');
 $requiremilestone = $vars->{requiremilestone};
 DuplicateUserConfirm($vars->{bug_id}, $duplicate) if $vars->{DuplicateUserConfirm};
 _remove_remaining_time() if $vars->{remove_remaining_time};