Permalink
Browse files

Fix address untainting error.

Reported by Alberto Simões on irc.perl.org and diagnosted with copious
help from Chris Williams.  Thanks, guys!
  • Loading branch information...
1 parent 963f8fe commit 202dea1c77b0b80aae8a06eef5318f63cc189c9e @rcaputo committed May 15, 2012
Showing with 1 addition and 1 deletion.
  1. +1 −1 lib/POE/Component/Resolver.pm
@@ -503,7 +503,7 @@ sub unpack_addr {
my ($self, $address_rec) = @_;
# [rt.cpan.org 76314] Untaint the address.
- my ($input_addr) = ($address_rec->{addr} =~ /\A(.*)\z/);
+ my ($input_addr) = ($address_rec->{addr} =~ /\A(.*)\z/s);
my ($error, $address, $port) = (
(getnameinfo $input_addr, NI_NUMERICHOST | NI_NUMERICSERV)[0,1]

0 comments on commit 202dea1

Please sign in to comment.