X-Git-Url: http://git.shadowcat.co.uk/gitweb/gitweb.cgi?a=blobdiff_plain;f=taint.c;h=e163eb4135514914fb100482a78f51e17b8ec6b6;hb=9cc6feabb930fb7cac992ab0a2febf2fb1986667;hp=88ca8a5a48d0fa00e5ba3a4df4d9d8030812340d;hpb=3280af22f58e7b37514ed104858e2c2fc55ceeeb;p=p5sagit%2Fp5-mst-13.2.git diff --git a/taint.c b/taint.c index 88ca8a5..e163eb4 100644 --- a/taint.c +++ b/taint.c @@ -17,6 +17,8 @@ taint_proper(const char *f, char *s) "%s %d %d %d\n", s, PL_tainted, PL_uid, PL_euid)); if (PL_tainted) { + if (!f) + f = PL_no_security; if (PL_euid != PL_uid) ug = " while running setuid"; else if (PL_egid != PL_gid) @@ -25,8 +27,8 @@ taint_proper(const char *f, char *s) ug = " while running with -T switch"; if (!PL_unsafe) croak(f, s, ug); - else if (PL_dowarn) - warn(f, s, ug); + else if (ckWARN(WARN_TAINT)) + warner(WARN_TAINT, f, s, ug); } } @@ -44,15 +46,19 @@ taint_env(void) NULL }; + if (!PL_envgv) + return; + #ifdef VMS + { int i = 0; char name[10 + TYPE_DIGITS(int)] = "DCL$PATH"; while (1) { if (i) (void)sprintf(name,"DCL$PATH;%d", i); - svp = hv_fetch(GvHVn(envgv), name, strlen(name), FALSE); - if (!svp || *svp == &sv_undef) + svp = hv_fetch(GvHVn(PL_envgv), name, strlen(name), FALSE); + if (!svp || *svp == &PL_sv_undef) break; if (SvTAINTED(*svp)) { dTHR; @@ -66,6 +72,7 @@ taint_env(void) } i++; } + } #endif /* VMS */ svp = hv_fetch(GvHVn(PL_envgv),"PATH",4,FALSE); @@ -87,9 +94,10 @@ taint_env(void) svp = hv_fetch(GvHVn(PL_envgv),"TERM",4,FALSE); if (svp && *svp && SvTAINTED(*svp)) { dTHR; /* just for taint */ + STRLEN n_a; bool was_tainted = PL_tainted; - char *t = SvPV(*svp, PL_na); - char *e = t + PL_na; + char *t = SvPV(*svp, n_a); + char *e = t + n_a; PL_tainted = was_tainted; if (t < e && isALNUM(*t)) t++;