From 597568d4296cd255a3cfcf49ef24da3f8d7d7a25 Mon Sep 17 00:00:00 2001
From: Rafael Garcia-Suarez <rgarciasuarez@mandriva.org>
Date: Wed, 29 Jun 2005 03:12:42 +0000
Subject: Untaint rurpmi arguments

---
 rurpmi | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'rurpmi')

diff --git a/rurpmi b/rurpmi
index 21a9c0ba..ba31c9d7 100644
--- a/rurpmi
+++ b/rurpmi
@@ -2,6 +2,7 @@
 
 use strict;
 use urpm::msg;
+use urpm::util qw(untaint);
 
 if ($< != 0) {
     print STDERR N("Only superuser is allowed to install packages"), "\n";
@@ -12,4 +13,4 @@ $ENV{PATH} = "/sbin:/usr/sbin:/bin:/usr/bin:/usr/X11R6/bin";
 delete @ENV{qw(ENV BASH_ENV IFS CDPATH PERLLIB PERL5LIB PERL5OPT PERLIO PERLIO_DEBUG PERL5DB PERL_ENCODING PERL_HASH_SEED PERL_SIGNALS PERL_UNICODE)};
 
 print STDERR N("Running urpmi in restricted mode..."), "\n";
-exec '/usr/bin/perl', '/usr/sbin/urpmi', '--restricted', @ARGV;
+exec '/usr/bin/perl', '/usr/sbin/urpmi', '--restricted', map { untaint $_ } @ARGV;
-- 
cgit v1.2.1