-
Notifications
You must be signed in to change notification settings - Fork 25
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Removes taint checking functions #29
base: master
Are you sure you want to change the base?
Conversation
Taint checking has been completely removed from Ruby as of Ruby 3.2.0. This commit removes taint checking functions from ruby- shadow. See https://bugs.ruby-lang.org/issues/16131
Taintedness is deprecated since 2.7.0 and this commit ruby/ruby@ffd0820 actually shows To keep compatibility, I think the following is better.
|
By the way created "issue" ticket as #32 . |
@@ -56,8 +56,8 @@ static VALUE convert_pw_struct( struct passwd *entry ) | |||
{ | |||
/* Hmm. Why custom pw_change instead of sp_lstchg? */ | |||
return rb_struct_new(rb_sPasswdEntry, | |||
rb_tainted_str_new2(entry->pw_name), /* sp_namp */ | |||
rb_tainted_str_new2(entry->pw_passwd), /* sp_pwdp, encryped password */ | |||
rb_str_new2(entry->pw_name), /* sp_namp */ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@mhashizume Does this. need to be wrapped in a macro? Are we losing anythign for older rubies?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Core ruby did something similar when switching dir.c
to use untainted strings:
ruby/ruby@ffd0820#diff-13026f61c17631884dc4c6ee9128710ef8801844114eaedaf0a13db649b4b0a2
In Ruby 2.7, taint has no effect on strings, and since older rubies are EOL this should be safe.
Taint checking has been completely removed from Ruby as of Ruby 3.2.0. This commit removes taint checking functions from ruby- shadow.
See https://bugs.ruby-lang.org/issues/16131