Project

General

Profile

Actions

Backport #1789

closed

TCPSocket#read returns untainted string

Added by tommy (Masahiro Tomita) over 14 years ago. Updated almost 13 years ago.

Status:
Closed
[ruby-dev:38826]

Description

=begin
とみたです。

TCPSocket#read が untainted 文字列を返します。

$ ruby -v -rsocket -e 'p TCPSocket.new("localhost",25).read(4).tainted?'
ruby 1.9.2dev (2009-07-19 trunk 24201) [i686-linux]
false

1.8.7 では tainted です。

$ ruby -v -rsocket -e 'p TCPSocket.new("localhost",25).read(4).tainted?'
ruby 1.8.7 (2008-08-11 patchlevel 72) [i486-linux]
true

ちなみに TCPSocket#gets は tainted になります。

$ /usr/local/ruby-1.9.1/bin/ruby -v -rsocket -e 'p TCPSocket.new("localhost",25).gets.tainted?'
ruby 1.9.2dev (2009-07-19 trunk 24201) [i686-linux]
true
=end

Actions #1

Updated by nobu (Nobuyoshi Nakada) over 14 years ago

  • Status changed from Open to Closed
  • % Done changed from 0 to 100

=begin
Applied in changeset r24203.
=end

Actions #2

Updated by nobu (Nobuyoshi Nakada) over 14 years ago

  • Category set to core
  • Status changed from Closed to Assigned
  • Assignee set to yugui (Yuki Sonoda)

=begin

=end

Actions #3

Updated by yugui (Yuki Sonoda) over 14 years ago

  • Status changed from Assigned to Closed

=begin
Applied in changeset r24290.
=end

Actions

Also available in: Atom PDF

Like0
Like0Like0Like0