freebsd-ports/lang/ruby18/files/patch-lib_xmlrpc_utils.rb
Simon L. B. Nielsen 575be647d6 Fix arbitrary command execution in XMLRPC server.
PR:		ports/82855
Submitted by:	Renato Botelho <freebsd@galle.com.br>
Obtained from:	Ruby CVS
Approved by:	maintainer timeout (1 day; security)
With hat:	secteam
Security:	CAN-2005-1992
Security:	http://vuxml.FreeBSD.org/594eb447-e398-11d9-a8bd-000cf18bbe54.html
2005-07-03 10:26:31 +00:00

11 lines
397 B
Ruby

--- lib/xmlrpc/utils.rb.orig Fri Jul 1 07:38:00 2005
+++ lib/xmlrpc/utils.rb Fri Jul 1 07:38:55 2005
@@ -138,7 +138,7 @@
def get_methods(obj, delim=".")
prefix = @prefix + delim
- obj.class.public_instance_methods.collect { |name|
+ obj.class.public_instance_methods(false).collect { |name|
[prefix + name, obj.method(name).to_proc, nil, nil]
}
end