From 45c37073038bde691ef12350277cd5a0b7796ec3 Mon Sep 17 00:00:00 2001 From: akr Date: Thu, 4 Sep 2008 10:15:34 +0000 Subject: * include/ruby/encoding.h (ECONV_INVALID_IGNORE): removed because it tend to cause security problem. If the behaviour is really required, ECONV_INVALID_REPLACE with empty string can be used. For example, CVE-2006-2313, CVE-2008-1036, [ruby-core:15645] (ECONV_UNDEF_IGNORE): ditto. * transcode.c (rb_econv_convert): follow the above change. (econv_opts): ditto. (Init_transcode): ditto. git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@19123 b2dd03c8-39d4-4d8f-98ff-823fe69b080e --- include/ruby/encoding.h | 2 -- 1 file changed, 2 deletions(-) (limited to 'include/ruby/encoding.h') diff --git a/include/ruby/encoding.h b/include/ruby/encoding.h index 10a7b95229..ae1ec13e74 100644 --- a/include/ruby/encoding.h +++ b/include/ruby/encoding.h @@ -251,11 +251,9 @@ void rb_econv_binmode(rb_econv_t *ec); /* flags for rb_econv_open */ #define ECONV_INVALID_MASK 0x000f -#define ECONV_INVALID_IGNORE 0x0001 #define ECONV_INVALID_REPLACE 0x0002 #define ECONV_UNDEF_MASK 0x00f0 -#define ECONV_UNDEF_IGNORE 0x0010 #define ECONV_UNDEF_REPLACE 0x0020 /* effective only if output is ascii compatible */ -- cgit v1.2.3