[svn:qpsmtpd] r545 - trunk

Author: aqua
Date: Fri Aug 26 02:51:57 2005
New Revision: 545

Modified:
   trunk/qpsmtpd-forkserver
Log:
Detaint %ENV somewhat more thoroughly (derived from perl5.8.7 perlsec POD).


Modified: trunk/qpsmtpd-forkserver
==============================================================================
--- trunk/qpsmtpd-forkserver	(original)
+++ trunk/qpsmtpd-forkserver	Fri Aug 26 02:51:57 2005
@@ -68,7 +68,7 @@ for (0..$#LOCALADDR) {
 if ($USER =~ /^([\w\-]+)$/) { $USER = $1 } else { &usage }
 if ($MAXCONN =~ /^(\d+)$/) { $MAXCONN = $1 } else { &usage }
 
-delete $ENV{ENV};
+delete @ENV{'ENV','CDPATH','IFS','BASH_ENV'};
 $ENV{PATH} = '/bin:/usr/bin:/var/qmail/bin';
 
 my %childstatus = ();