diff options
author | Frédéric Buclin <LpSolit@gmail.com> | 2015-09-25 20:35:20 +0200 |
---|---|---|
committer | Frédéric Buclin <LpSolit@gmail.com> | 2015-09-25 20:35:20 +0200 |
commit | a326cd5545b36f7a59e1912494959a0932250263 (patch) | |
tree | cdf637b81dd2e5baa77d765440b31279c71a5250 /Bugzilla.pm | |
parent | Bug 1201809: The default value for user settings cannot be false (diff) | |
download | bugzilla-a326cd5545b36f7a59e1912494959a0932250263.tar.gz bugzilla-a326cd5545b36f7a59e1912494959a0932250263.tar.bz2 bugzilla-a326cd5545b36f7a59e1912494959a0932250263.zip |
Bug 1089448: Strawberry Perl throws a "Insecure dependency in sysopen" error when attaching a file
r=gerv a=dkl
Diffstat (limited to 'Bugzilla.pm')
-rw-r--r-- | Bugzilla.pm | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/Bugzilla.pm b/Bugzilla.pm index e3184fdb8..3f4d31101 100644 --- a/Bugzilla.pm +++ b/Bugzilla.pm @@ -87,6 +87,14 @@ sub init_page { # Some modules throw undefined errors (notably File::Spec::Win32) if # PATH is undefined. $ENV{'PATH'} = ''; + # On Windows, these paths are tainted, preventing File::Spec::Win32->tmpdir + # from using them. But we need a place to temporary store attachments + # which are uploaded. + if (ON_WINDOWS) { + foreach my $temp (qw(TMPDIR TMP TEMP)) { + trick_taint($ENV{$temp}) if $ENV{$temp}; + } + } } # Because this function is run live from perl "use" commands of |