lib/shell/command-processor.rb (Shell#[]): prevent unknown command
authorusa <usa@b2dd03c8-39d4-4d8f-98ff-823fe69b080e>
Tue, 1 Oct 2019 11:01:53 +0000 (11:01 +0000)
committerUtkarsh Gupta <utkarsh@debian.org>
Sun, 19 Sep 2021 03:40:46 +0000 (04:40 +0100)
commitd57bd882a231912d9ca98e31da498701089f43b1
treeaaf146a5be2b762fd02845c0e1994fe07832003d
parent94a0b954b5be5db31e82465c13c30f17102a253f
lib/shell/command-processor.rb (Shell#[]): prevent unknown command

Origin: https://github.com/ruby/ruby/commit/3af01ae1101e0b8815ae5a106be64b0e82a58640
Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2019-16255

`FileTest.send(command, ...)` allows to call not only FileTest-related
methods but also any method that belongs to Kernel, Object, etc.
patched by <mame@ruby-lang.org>

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_2_5@67814 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
[Salvatore Bonaccorso: Backport to 2.3.3:
 - Context changes in test/shell/test_command_processor.rb
]

Gbp-Pq: Name lib-shell-command-processor.rb-Shell-prevent-unknown.patch
lib/shell/command-processor.rb
test/shell/test_command_processor.rb