This is a live mirror of the Perl 5 development currently hosted at https://github.com/perl/perl5
Run external commands only with localized sanitized $ENV{PATH}.
authorJarkko Hietaniemi <jhi@iki.fi>
Sun, 25 May 2003 18:51:00 +0000 (18:51 +0000)
committerJarkko Hietaniemi <jhi@iki.fi>
Sun, 25 May 2003 18:51:00 +0000 (18:51 +0000)
p4raw-id: //depot/perl@19621

ext/Sys/Hostname/Hostname.pm

index efc8d38..632ea9b 100644 (file)
@@ -72,6 +72,8 @@ sub hostname {
   else {  # Unix
     # is anyone going to make it here?
 
+    local $ENV{PATH} = '/usr/bin:/bin:/usr/sbin:/sbin'; # Paranoia.
+
     # method 2 - syscall is preferred since it avoids tainting problems
     # XXX: is it such a good idea to return hostname untainted?
     eval {