deac/gitolite
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

review all user input, system(), and ``

Browse source
This commit is contained in:
Sitaram Chamarty 2012-03-21 09:34:39 +05:30
parent 98a6b08ff4
commit 5e2e13aac2
3 changed files with 10 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

3
src/commands/post-compile/ssh-authkeys
View file

@ -87,6 +87,7 @@ sub fp {
my $in = shift || '';
if ( $in =~ /\.pub$/ ) {
# single pubkey file
_die "bad pubkey file '$in'" unless $in =~ $REPONAME_PATT;
return fp_file($in);
} elsif ( -f $in ) {
# an authkeys file
@ -99,7 +100,7 @@ sub fp {
sub fp_file {
my $f = shift;
my $fp = `ssh-keygen -l -f $f`;
my $fp = `ssh-keygen -l -f '$f'`;
chomp($fp);
_die "fingerprinting failed for $f" unless $fp =~ /([0-9a-f][0-9a-f](:[0-9a-f][0-9a-f])+)/;
$fp = $1;