Add backstop check for taint of executable name when calling exec()

[exim.git] / src / src / exim.c

diff --git a/src/src/exim.c b/src/src/exim.c
index eada6bbf8177b232af589361a865873f8a05973f..ade96fe206736d72fa39e00e7adfcd20161abd8d 100644 (file)
--- a/src/src/exim.c
+++ b/src/src/exim.c
@@ -4397,7 +4397,7 @@ if (bi_option)
     {
     int i = 0;
     uschar *argv[3];
-    argv[i++] = bi_command;
+    argv[i++] = bi_command;    /* nonexpanded option so assume untainted */
     if (alias_arg) argv[i++] = alias_arg;
     argv[i++] = NULL;