diff options
| author |   Frédéric Buclin <LpSolit@gmail.com> | 2011-08-04 22:24:57 +0200 |
|---|---|---|
| committer | Frédéric Buclin <LpSolit@gmail.com> | 2011-08-04 22:24:57 +0200 |
| commit | 7c617696a871101dbbc0cc696faf285a7b807ace (patch) | |
| tree | 22df999fcad1742443063a8dc0ab38fa946e5aa7 | |
| parent | Bug 653477: (CVE-2011-2380) [SECURITY] Group names can be guessed when creati... (diff) | |
| download | bugzilla-7c617696a871101dbbc0cc696faf285a7b807ace.tar.gz bugzilla-7c617696a871101dbbc0cc696faf285a7b807ace.tar.bz2 bugzilla-7c617696a871101dbbc0cc696faf285a7b807ace.zip | |
Bug 660502: (CVE-2011-2977) [SECURITY] Temporary files for uploaded attachments are not deleted on Windows
r=glob a=LpSolit
| -rw-r--r-- | Bugzilla/Attachment.pm | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/Bugzilla/Attachment.pm b/Bugzilla/Attachment.pm index a2abebb8d..d6037b3e7 100644 --- a/Bugzilla/Attachment.pm +++ b/Bugzilla/Attachment.pm @@ -560,6 +560,7 @@ sub _check_data { local $/; my $fh = $params->{data}; $data = <$fh>; + close $fh; } } Bugzilla::Hook::process('attachment_process_data', { data => \$data, |