lib/shell/command-processor.rb (Shell#[]): prevent unknown command
authorusa <usa@b2dd03c8-39d4-4d8f-98ff-823fe69b080e>
Tue, 1 Oct 2019 11:01:53 +0000 (11:01 +0000)
committerUtkarsh Gupta <utkarsh@debian.org>
Fri, 5 Jun 2020 08:55:50 +0000 (09:55 +0100)
commit5d33ace4ef595d3f0079f5aeb8b99475ab63dfff
tree00cd194e8e998f874834da3b85c02bb80ec520c2
parent499fdc63aa88bf6f6a0830a426b1d9c6d0fb445f
lib/shell/command-processor.rb (Shell#[]): prevent unknown command

Origin: https://github.com/ruby/ruby/commit/3af01ae1101e0b8815ae5a106be64b0e82a58640
Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2019-16255

`FileTest.send(command, ...)` allows to call not only FileTest-related
methods but also any method that belongs to Kernel, Object, etc.
patched by <mame@ruby-lang.org>

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_2_5@67814 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
[Salvatore Bonaccorso: Backport to 2.3.3:
 - Context changes in test/shell/test_command_processor.rb
]

Gbp-Pq: Name lib-shell-command-processor.rb-Shell-prevent-unknown.patch
lib/shell/command-processor.rb
test/shell/test_command_processor.rb