From: Frédéric Buclin <LpSolit@gmail.com>
Date: Thu, 4 Aug 2011 20:23:31 +0000 (+0200)
Subject: Bug 660502: (CVE-2011-2977) [SECURITY] Temporary files for uploaded attachments are... 
X-Git-Tag: bugzilla-4.0.2~3
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=279d5af4034b5bc35af12920069186126801ff7f;p=thirdparty%2Fbugzilla.git

Bug 660502: (CVE-2011-2977) [SECURITY] Temporary files for uploaded attachments are not deleted on Windows
r=glob a=LpSolit
---

diff --git a/Bugzilla/Attachment.pm b/Bugzilla/Attachment.pm
index 79f7b915e4..c111e046a9 100644
--- a/Bugzilla/Attachment.pm
+++ b/Bugzilla/Attachment.pm
@@ -571,6 +571,7 @@ sub _check_data {
             local $/;
             my $fh = $params->{data};
             $data = <$fh>;
+            close $fh;
         }
     }
     Bugzilla::Hook::process('attachment_process_data', { data       => \$data,