ACL: taint-enforce queue modifier

[exim.git] / src / src / acl.c

diff --git a/src/src/acl.c b/src/src/acl.c
index 7284831a6ef881952d4a1c184329b7d83d6157a7..3166069baa46f7701addccad36a44e9f12cb5562 100644 (file)
--- a/src/src/acl.c
+++ b/src/src/acl.c
@@ -3590,6 +3590,12 @@ for (; cb; cb = cb->next)
     #endif
 
     case ACLC_QUEUE:
+    if (is_tainted(arg))
+      {
+      *log_msgptr = string_sprintf("Tainted name '%s' for queue not permitted",
+                                   arg);
+      return ERROR;
+      }
     if (Ustrchr(arg, '/'))
       {
       *log_msgptr = string_sprintf(