diff options
| author | yar <yar@FreeBSD.org> | 2002-02-11 15:26:20 +0000 |
|---|---|---|
| committer | yar <yar@FreeBSD.org> | 2002-02-11 15:26:20 +0000 |
| commit | b4afbb7b01ffdbaa87712d20e5eb6e2ea6867ef8 (patch) | |
| tree | b413400029c13b92181c1bed4340a1c699edfe00 /usr.sbin/adduser | |
| parent | 9cadaeedec94f9c698b04ab21d6f8cca7bee2600 (diff) | |
| download | FreeBSD-src-b4afbb7b01ffdbaa87712d20e5eb6e2ea6867ef8.zip FreeBSD-src-b4afbb7b01ffdbaa87712d20e5eb6e2ea6867ef8.tar.gz | |
Found a single point where rmuser(8) wasn't robust to strange
characters in a username: where it was inserted into a regexp.
Fix it by escaping metacharacters in the name with \Q-\E.
Diffstat (limited to 'usr.sbin/adduser')
| -rw-r--r-- | usr.sbin/adduser/rmuser.perl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/usr.sbin/adduser/rmuser.perl b/usr.sbin/adduser/rmuser.perl index aeb9988..1ffac08 100644 --- a/usr.sbin/adduser/rmuser.perl +++ b/usr.sbin/adduser/rmuser.perl @@ -380,7 +380,7 @@ sub update_group_file { chown($group_uid, $group_gid, $new_group_file) || print STDERR "\n${whoami}: Warning: could not set owner/group of new group file to ${group_uid}/${group_gid} ($!)\n\rContinuing, but please check ownership of $group_file!\n"; while ($i = <GROUP>) { - if (!($i =~ /$login_name/)) { + if (!($i =~ /\Q$login_name\E/)) { # Line doesn't contain any references to the user, so just add it # to the new file print NEW_GROUP $i; |
