From 22d9bd944d4aae1b682e0bd4eafab706ff5a981e Mon Sep 17 00:00:00 2001 From: Hiroshi SHIBATA Date: Sat, 17 Aug 2019 11:05:29 +0900 Subject: Keep the existance behavior with symlink path --- lib/rubygems/core_ext/kernel_require.rb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'lib') diff --git a/lib/rubygems/core_ext/kernel_require.rb b/lib/rubygems/core_ext/kernel_require.rb index 5986e356bc..cbd92588c0 100755 --- a/lib/rubygems/core_ext/kernel_require.rb +++ b/lib/rubygems/core_ext/kernel_require.rb @@ -39,8 +39,10 @@ module Kernel resolved_path = begin rp = nil $LOAD_PATH[0...Gem.load_path_insert_index || -1].each do |lp| + safe_lp = lp.dup.untaint + next if File.symlink? safe_lp Gem.suffixes.each do |s| - full_path = File.expand_path(File.join(lp, "#{path}#{s}").untaint) + full_path = File.expand_path(File.join(safe_lp, "#{path}#{s}")) if File.file?(full_path) rp = full_path break -- cgit v1.2.3