Track tainted data and refuse to expand it

[exim.git] / src / src / auths / xtextdecode.c

diff --git a/src/src/auths/xtextdecode.c b/src/src/auths/xtextdecode.c
index 5312acf351ffb07a5c825183383113c1355ac8b2..95cf5dab2c4c2f84ec7e3e6974cf066be5694351 100644 (file)
--- a/src/src/auths/xtextdecode.c
+++ b/src/src/auths/xtextdecode.c
@@ -33,7 +33,7 @@ int
 auth_xtextdecode(uschar *code, uschar **ptr)
 {
 register int x;
-uschar *result = store_get(Ustrlen(code) + 1);
+uschar *result = store_get(Ustrlen(code) + 1, is_tainted(code));
 *ptr = result;
 
 while ((x = (*code++)) != 0)