r9639 - in /trunk/libauthen-captcha-perl: Captcha.pm debian/changelog

[emhn-guest at users.alioth.debian.org]

Author: emhn-guest
Date: Tue Nov 20 18:46:39 2007
New Revision: 9639

URL: http://svn.debian.org/wsvn/?sc=1&rev=9639
Log:
* Applied patch by Chris Dunlop <chris at onthe.net.au> (Closes: #409731)
  until upstream catches up.

Modified:
    trunk/libauthen-captcha-perl/Captcha.pm
    trunk/libauthen-captcha-perl/debian/changelog

Modified: trunk/libauthen-captcha-perl/Captcha.pm
URL: http://svn.debian.org/wsvn/trunk/libauthen-captcha-perl/Captcha.pm?rev=9639&op=diff
==============================================================================
--- trunk/libauthen-captcha-perl/Captcha.pm (original)
+++ trunk/libauthen-captcha-perl/Captcha.pm Tue Nov 20 18:46:39 2007
@@ -232,7 +232,11 @@
 	foreach my $line (@data) 
 	{
 		$line =~ s/\n//;
-		my ($data_time,$data_code) = split(/::/,$line);
+        # Fixes Debian Bug #409731
+        # Extract untainted time and code
+        # Chris Dunlop <chris at onthe.net.au>
+        # Applied by Ernesto Hernández-Novich <emhn at usb.ve>
+		my ($data_time,$data_code) = $line =~ m/(^\d+)::([[:xdigit:]]{32})$/;
 		
 		my $png_file = File::Spec->catfile($self->output_folder(),$data_code . ".png");
 		if ($data_code eq $crypt)
@@ -351,7 +355,12 @@
 	foreach my $line (@data) 
 	{
 		$line =~ s/\n//;
-		my ($data_time,$data_code) = split(/::/,$line);
+        # Fixes Debian Bug #409731
+        # Extract untainted time and code
+        # Chris Dunlop <chris at onthe.net.au>
+        # Applied by Ernesto Hernández-Novich <emhn at usb.ve>
+		my ($data_time,$data_code) = $line =~ m/(^\d+)::([[:xdigit:]]{32})$/;
+
 		if ( (($current_time - $data_time) > ($self->expire())) ||
 		     ($data_code  eq $md5) )
 		{	# remove expired captcha, or a dup

Modified: trunk/libauthen-captcha-perl/debian/changelog
URL: http://svn.debian.org/wsvn/trunk/libauthen-captcha-perl/debian/changelog?rev=9639&op=diff
==============================================================================
--- trunk/libauthen-captcha-perl/debian/changelog (original)
+++ trunk/libauthen-captcha-perl/debian/changelog Tue Nov 20 18:46:39 2007
@@ -1,10 +1,12 @@
-libauthen-captcha-perl (1.023-4) unstable; urgency=low
+libauthen-captcha-perl (1.023-3) UNRELEASED; urgency=low
 
   [ Ernesto Hernández-Novich (USB) ]
   * Moved package into Debian Pkg Perl Project SVN.
   * Fixed copyright file with a better URL.
   * Cleanup debian/rules.
   * Fixed watch file.
+  * Applied patch by Chris Dunlop <chris at onthe.net.au> (Closes: #409731)
+    until upstream catches up.
 
   [ Rene Mayorga ]
   * Remove debian/docs, is not needed, Changes and README are installed