matz	2008-10-31 13:40:34 +0900 (Fri, 31 Oct 2008)

  New Revision: 20074

  http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=20074

  Log:
    * dir.c (dir_globs): need taint check.  reported by steve
      <oksteev at gmail.com>

  Modified files:
    trunk/ChangeLog
    trunk/dir.c

Index: ChangeLog
===================================================================
--- ChangeLog	(revision 20073)
+++ ChangeLog	(revision 20074)
@@ -1,3 +1,8 @@
+Fri Oct 31 12:51:25 2008  Yukihiro Matsumoto  <matz@r...>
+
+	* dir.c (dir_globs): need taint check.  reported by steve
+	  <oksteev at gmail.com>
+
 Fri Oct 31 12:42:45 2008  wanabe  <s.wanabe@g...>
 
 	* array.c (rb_ary_decrement_share): fix to work recycling
Index: dir.c
===================================================================
--- dir.c	(revision 20073)
+++ dir.c	(revision 20074)
@@ -1571,7 +1571,7 @@
     for (i = 0; i < argc; ++i) {
 	int status;
 	VALUE str = argv[i];
-	StringValue(str);
+	SafeStringValue(str);
 	status = push_glob(ary, str, flags);
 	if (status) GLOB_JUMP_TAG(status);
     }

--
ML: ruby-changes@q...
Info: http://www.atdot.net/~ko1/quickml/