From: ts <decoux@...>
Date: 2003-03-12T01:07:24+09:00
Subject: Re: $SAFE and creating New objects (File) again

>>>>> "R" == \"RayZ\" Andrew V Rumm <RayZ> writes:

R> newImageFile = File.new(ImagesDir + newImageFilename + i_extension, "w")

 One of the variables `ImagesDir', `newImageFilename', `i_extension' is
 tainted this is why ruby give an error,  for example

pigeon% cat b.rb
#!/usr/bin/ruby -T1
newImageFilename = "aa".taint
File.new(newImageFilename)
pigeon% 

pigeon% b.rb
./b.rb:3:in `initialize': Insecure operation - initialize (SecurityError)
        from ./b.rb:3:in `new'
        from ./b.rb:3
pigeon% 


 You must carefully untaint these variables.


Guy Decoux