reload_ruledb: untaint pid

[pmg-api.git] / PMG / DBTools.pm

diff --git a/PMG/DBTools.pm b/PMG/DBTools.pm
index 424edc0916af254cb17fbe89348d31adcda1500c..bac9006ef79704eb5ad56636126faf970794a7c2 100644 (file)
--- a/PMG/DBTools.pm
+++ b/PMG/DBTools.pm
@@ -1166,6 +1166,9 @@ sub reload_ruledb {
 
     return 0 if !$pid;
 
+    return 0 if $pid !~ m/^(\d+)$/;
+    $pid = $1; # untaint
+
     return kill (10, $pid); # send SIGUSR1
 }