Taint check pid and eid args! Don't know how this didn't get noticed until now...

e53779c1 · Mac Newbold · b71908f3 · e53779c1
Commit e53779c1 authored Jun 11, 2003 by Mac Newbold
Hide whitespace changes
Inline Side-by-side

Showing with 16 additions and 0 deletions

tbsetup/tbswap.in tbsetup/tbswap.in +16 -0

No files found.
--- a/tbsetup/tbswap.in
+++ b/tbsetup/tbswap.in
@@ -107,6 +107,22 @@ if ($#ARGV < 1) {
 }
 my ($pid,$eid) = @ARGV;

+#
+# Untaint the arguments.
+#
+if ($pid =~ /^([-\@\w.]+)$/) {
+    $pid = $1;
+}
+else {
+    die("Tainted argument $pid!\n");
+}
+if ($eid =~ /^([-\@\w.]+)$/) {
+    $eid = $1;
+}
+else {
+    die("Tainted argument $eid!\n");
+}
+
 TBDebugTimeStampsOn();

 #