From: Akinori MUSHA <knu@...>
Date: 2007-03-03T18:49:16+09:00
Subject: [ruby-dev:30471] Re: NEWS is added

--pgp-sign-Multipart_Sat_Mar__3_18:49:15_2007-1
Content-Type: text/plain; charset=ISO-2022-JP

At Fri, 2 Mar 2007 08:41:29 +0900,
とみたまさひろ wrote:
> NEWS に書くべきものかどうかわからなかったのですが、個人的にちょっとは
> まったので…。
>
>  * taint 文字列の intern が SecurityError 例外が発生するように変更された。
>
>    $ ./ruby -v -e '$SAFE=1; p "hoge".taint.intern'
>    ruby 1.8.5 (2006-12-25 patchlevel 12) [i686-linux]
>    :hoge
>
>    $ ./ruby -v -e '$SAFE=1; p "hoge".taint.intern'
>    ruby 1.8.6 (2007-02-24 patchlevel 0) [i686-linux]
>    -e:1:in `intern': Insecure: can't intern tainted string (SecurityError)
>            from -e:1
>
> # 英語は書けません (__;

　ご指摘ありがとうございます。ChangeLog の以下のエントリの修正ですね。

* string.c (rb_str_intern): raise SecurityError only when $SAFE
  level is greater than zero.  [ruby-core:08862]

　入れておきます。

--
                     /
                    /__  __            Akinori.org / MUSHA.org
                   / )  )  ) )  /     FreeBSD.org / Ruby-lang.org
Akinori MUSHA aka / (_ /  ( (__(  @ iDaemons.org / and.or.jp

"Different eyes see different things,
    Different hearts beat on different strings --
       But there are times for you and me when all such things agree"

--pgp-sign-Multipart_Sat_Mar__3_18:49:15_2007-1
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (FreeBSD)

iD8DBQBF6USbkgvvx5/Z4e4RAsOVAKDCN7SU20kmWn/JoL9RXaLfVQ0TPgCeKuOf
33mNhEg9bfGpv3aEBmSa1NI=
=p2yr
-----END PGP SIGNATURE-----

--pgp-sign-Multipart_Sat_Mar__3_18:49:15_2007-1--