| Line | |
|---|
| 1 | taint.c AOK
|
|---|
| 2 |
|
|---|
| 3 | Insecure %s%s while running with -T switch
|
|---|
| 4 |
|
|---|
| 5 | __END__
|
|---|
| 6 | -T
|
|---|
| 7 | --FILE-- abc
|
|---|
| 8 | def
|
|---|
| 9 | --FILE--
|
|---|
| 10 | # taint.c
|
|---|
| 11 | open(FH, "<abc") ;
|
|---|
| 12 | $a = <FH> ;
|
|---|
| 13 | close FH ;
|
|---|
| 14 | chdir $a ;
|
|---|
| 15 | print "xxx\n" ;
|
|---|
| 16 | EXPECT
|
|---|
| 17 | Insecure dependency in chdir while running with -T switch at - line 5.
|
|---|
| 18 | ########
|
|---|
| 19 | -TU
|
|---|
| 20 | --FILE-- abc
|
|---|
| 21 | def
|
|---|
| 22 | --FILE--
|
|---|
| 23 | # taint.c
|
|---|
| 24 | open(FH, "<abc") ;
|
|---|
| 25 | $a = <FH> ;
|
|---|
| 26 | close FH ;
|
|---|
| 27 | chdir $a ;
|
|---|
| 28 | print "xxx\n" ;
|
|---|
| 29 | EXPECT
|
|---|
| 30 | xxx
|
|---|
| 31 | ########
|
|---|
| 32 | -TU
|
|---|
| 33 | --FILE-- abc
|
|---|
| 34 | def
|
|---|
| 35 | --FILE--
|
|---|
| 36 | # taint.c
|
|---|
| 37 | open(FH, "<abc") ;
|
|---|
| 38 | $a = <FH> ;
|
|---|
| 39 | close FH ;
|
|---|
| 40 | use warnings 'taint' ;
|
|---|
| 41 | chdir $a ;
|
|---|
| 42 | print "xxx\n" ;
|
|---|
| 43 | no warnings 'taint' ;
|
|---|
| 44 | chdir $a ;
|
|---|
| 45 | print "yyy\n" ;
|
|---|
| 46 | EXPECT
|
|---|
| 47 | Insecure dependency in chdir while running with -T switch at - line 6.
|
|---|
| 48 | xxx
|
|---|
| 49 | yyy
|
|---|
Note:
See
TracBrowser
for help on using the repository browser.
