X-Git-Url: http://git.shadowcat.co.uk/gitweb/gitweb.cgi?a=blobdiff_plain;f=taint.c;h=e163eb4135514914fb100482a78f51e17b8ec6b6;hb=a9ef352ac26829339bf17aa20568b3bde2fb1dd0;hp=4c031de5177ddfe7275ea8877af799a596684bd3;hpb=6b88bc9c1f6d4b32c70e7ef68f8c65266e431623;p=p5sagit%2Fp5-mst-13.2.git diff --git a/taint.c b/taint.c index 4c031de..e163eb4 100644 --- a/taint.c +++ b/taint.c @@ -17,6 +17,8 @@ taint_proper(const char *f, char *s) "%s %d %d %d\n", s, PL_tainted, PL_uid, PL_euid)); if (PL_tainted) { + if (!f) + f = PL_no_security; if (PL_euid != PL_uid) ug = " while running setuid"; else if (PL_egid != PL_gid) @@ -25,8 +27,8 @@ taint_proper(const char *f, char *s) ug = " while running with -T switch"; if (!PL_unsafe) croak(f, s, ug); - else if (PL_dowarn) - warn(f, s, ug); + else if (ckWARN(WARN_TAINT)) + warner(WARN_TAINT, f, s, ug); } } @@ -44,7 +46,11 @@ taint_env(void) NULL }; + if (!PL_envgv) + return; + #ifdef VMS + { int i = 0; char name[10 + TYPE_DIGITS(int)] = "DCL$PATH"; @@ -66,6 +72,7 @@ taint_env(void) } i++; } + } #endif /* VMS */ svp = hv_fetch(GvHVn(PL_envgv),"PATH",4,FALSE); @@ -87,9 +94,10 @@ taint_env(void) svp = hv_fetch(GvHVn(PL_envgv),"TERM",4,FALSE); if (svp && *svp && SvTAINTED(*svp)) { dTHR; /* just for taint */ + STRLEN n_a; bool was_tainted = PL_tainted; - char *t = SvPV(*svp, PL_na); - char *e = t + PL_na; + char *t = SvPV(*svp, n_a); + char *e = t + n_a; PL_tainted = was_tainted; if (t < e && isALNUM(*t)) t++;