From: Frédéric Buclin <LpSolit@gmail.com>
Date: Thu, 4 Aug 2011 20:24:57 +0000 (+0200)
Subject: Bug 660502: (CVE-2011-2977) [SECURITY] Temporary files for uploaded attachments are... 
X-Git-Tag: bugzilla-3.6.6~3
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7c617696a871101dbbc0cc696faf285a7b807ace;p=thirdparty%2Fbugzilla.git

Bug 660502: (CVE-2011-2977) [SECURITY] Temporary files for uploaded attachments are not deleted on Windows
r=glob a=LpSolit
---

diff --git a/Bugzilla/Attachment.pm b/Bugzilla/Attachment.pm
index a2abebb8d9..d6037b3e79 100644
--- a/Bugzilla/Attachment.pm
+++ b/Bugzilla/Attachment.pm
@@ -560,6 +560,7 @@ sub _check_data {
             local $/;
             my $fh = $params->{data};
             $data = <$fh>;
+            close $fh;
         }
     }
     Bugzilla::Hook::process('attachment_process_data', { data       => \$data,