X-Git-Url: http://git.shadowcat.co.uk/gitweb/gitweb.cgi?a=blobdiff_plain;f=taint.c;h=7a8baac7b0ff4f3f607ccae0bb39d86a4bea855f;hb=0bee9efe6e3302b0bae554ca99f35705369270f2;hp=cdf9a7e535f60a51934144119b5ba95bb3fb0e50;hpb=142393a6492fce5c4bb6f282b1ba1d8da7c0064b;p=p5sagit%2Fp5-mst-13.2.git diff --git a/taint.c b/taint.c index cdf9a7e..7a8baac 100644 --- a/taint.c +++ b/taint.c @@ -5,16 +5,18 @@ */ #include "EXTERN.h" +#define PERL_IN_TAINT_C #include "perl.h" void -taint_proper(const char *f, char *s) +Perl_taint_proper(pTHX_ const char *f, const char *s) { - dTHR; /* just for taint */ char *ug; +#ifdef HAS_SETEUID DEBUG_u(PerlIO_printf(Perl_debug_log, - "%s %d %d %d\n", s, PL_tainted, PL_uid, PL_euid)); + "%s %d %"Uid_t_f" %"Uid_t_f"\n", s, PL_tainted, PL_uid, PL_euid)); +#endif if (PL_tainted) { if (!f) @@ -26,14 +28,14 @@ taint_proper(const char *f, char *s) else ug = " while running with -T switch"; if (!PL_unsafe) - croak(f, s, ug); + Perl_croak(aTHX_ f, s, ug); else if (ckWARN(WARN_TAINT)) - warner(WARN_TAINT, f, s, ug); + Perl_warner(aTHX_ WARN_TAINT, f, s, ug); } } void -taint_env(void) +Perl_taint_env(pTHX) { SV** svp; MAGIC* mg; @@ -50,6 +52,7 @@ taint_env(void) return; #ifdef VMS + { int i = 0; char name[10 + TYPE_DIGITS(int)] = "DCL$PATH"; @@ -60,28 +63,25 @@ taint_env(void) if (!svp || *svp == &PL_sv_undef) break; if (SvTAINTED(*svp)) { - dTHR; TAINT; taint_proper("Insecure %s%s", "$ENV{DCL$PATH}"); } if ((mg = mg_find(*svp, 'e')) && MgTAINTEDDIR(mg)) { - dTHR; TAINT; taint_proper("Insecure directory in %s%s", "$ENV{DCL$PATH}"); } i++; } + } #endif /* VMS */ svp = hv_fetch(GvHVn(PL_envgv),"PATH",4,FALSE); if (svp && *svp) { if (SvTAINTED(*svp)) { - dTHR; TAINT; taint_proper("Insecure %s%s", "$ENV{PATH}"); } if ((mg = mg_find(*svp, 'e')) && MgTAINTEDDIR(mg)) { - dTHR; TAINT; taint_proper("Insecure directory in %s%s", "$ENV{PATH}"); } @@ -91,7 +91,6 @@ taint_env(void) /* tainted $TERM is okay if it contains no metachars */ svp = hv_fetch(GvHVn(PL_envgv),"TERM",4,FALSE); if (svp && *svp && SvTAINTED(*svp)) { - dTHR; /* just for taint */ STRLEN n_a; bool was_tainted = PL_tainted; char *t = SvPV(*svp, n_a); @@ -111,7 +110,6 @@ taint_env(void) for (e = misc_env; *e; e++) { svp = hv_fetch(GvHVn(PL_envgv), *e, strlen(*e), FALSE); if (svp && *svp != &PL_sv_undef && SvTAINTED(*svp)) { - dTHR; /* just for taint */ TAINT; taint_proper("Insecure $ENV{%s}%s", *e); }