1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
#!./perl -Tw
# Testing Cwd under taint mode.
use strict;
use Cwd;
chdir 't' unless $ENV{PERL_CORE};
use File::Spec;
use lib File::Spec->catdir('t', 'lib');
use Test::More;
BEGIN {
plan(
!eval { eval("1".substr($^X,0,0)) }
? (tests => 21)
: (skip_all => "A perl without taint support")
);
}
use Scalar::Util qw/tainted/;
my @Functions = qw(getcwd cwd fastcwd fastgetcwd
abs_path fast_abs_path
realpath fast_realpath
);
foreach my $func (@Functions) {
no strict 'refs';
my $cwd;
eval { $cwd = &{'Cwd::'.$func} };
is( $@, '', "$func() should not explode under taint mode" );
ok( tainted($cwd), "its return value should be tainted" );
}
# Previous versions of Cwd tainted $^O
is !tainted($^O), 1, "\$^O should not be tainted";
{
# [perl #126862] canonpath() loses taint
my $tainted = substr($ENV{PATH}, 0, 0);
# yes, getcwd()'s result should be tainted, and is tested above
# but be sure
ok tainted(File::Spec->canonpath($tainted . Cwd::getcwd)),
"canonpath() keeps taint on non-empty string";
ok tainted(File::Spec->canonpath($tainted)),
"canonpath() keeps taint on empty string";
(Cwd::getcwd() =~ /^(.*)/);
my $untainted = $1;
ok !tainted($untainted), "make sure our untainted value is untainted";
ok !tainted(File::Spec->canonpath($untainted)),
"canonpath() doesn't add taint to untainted string";
}
|
