Actions
Bug #14941
closedWindowsでARGVの文字列に汚染マークが付いてない
Description
WindowsのRuby2.2以降で、コマンドライン引数の文字列に汚染マークを付け忘れてます。
$ ruby -e "p ARGV[0].tainted?" arg
false
Updated by nobu (Nobuyoshi Nakada) almost 7 years ago
- Status changed from Open to Closed
Applied in changeset trunk|r64071.
ruby.c: taint ARGV on Windows
- ruby.c (external_str_new_cstr): strings come from the external
should be tainted. [ruby-dev:50596] [Bug #14941]
Updated by nobu (Nobuyoshi Nakada) almost 7 years ago
- Backport changed from 2.3: UNKNOWN, 2.4: UNKNOWN, 2.5: UNKNOWN to 2.3: REQUIRED, 2.4: REQUIRED, 2.5: REQUIRED
Updated by usa (Usaku NAKAMURA) over 6 years ago
- Backport changed from 2.3: REQUIRED, 2.4: REQUIRED, 2.5: REQUIRED to 2.3: REQUIRED, 2.4: DONE, 2.5: REQUIRED
ruby_2_4 r64563 merged revision(s) 64071.
Updated by nagachika (Tomoyuki Chikanaga) over 6 years ago
- Backport changed from 2.3: REQUIRED, 2.4: DONE, 2.5: REQUIRED to 2.3: REQUIRED, 2.4: DONE, 2.5: DONE
ruby_2_5 r64616 merged revision(s) 64071.
Actions
Like0
Like0Like0Like0Like0