dev-python/nautilus-python/files/nautilus-python-0.5.1-CVE-2009-0317.patch


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

--- ./src/nautilus-python.c.old	2009-02-24 16:01:08.000000000 -0800
+++ ./src/nautilus-python.c	2009-02-24 16:03:02.000000000 -0800
@@ -223,6 +223,12 @@
 		PyErr_Print();
 		return FALSE;
 	}
+	/* Sanitize sys.path */
+	PyRun_SimpleString("import sys; sys.path = filter(None, sys.path)");
+	if (PyErr_Occurred()) {
+		PyErr_Print();
+		return FALSE;
+	}
 
 	/* pygtk.require("2.0") */
 	debug("pygtk.require(\"2.0\")");