From d60d63ef804cad17387f8726fa6bdfec288300ce Mon Sep 17 00:00:00 2001
From: akr <akr@b2dd03c8-39d4-4d8f-98ff-823fe69b080e>
Date: Tue, 12 Jan 2010 11:47:03 +0000
Subject: [PATCH] * file.c (realpath_internal): call rb_secure.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@26302 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
---
 ChangeLog | 4 ++++
 file.c    | 3 +++
 2 files changed, 7 insertions(+)

diff --git a/ChangeLog b/ChangeLog
index f2aea85c60..1f136ee90a 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+Tue Jan 12 20:44:14 2010  Tanaka Akira  <akr@fsij.org>
+
+	* file.c (realpath_internal): call rb_secure.
+
 Tue Jan 12 16:48:46 2010  Nobuyoshi Nakada  <nobu@ruby-lang.org>
 
 	* lib/net/http.rb (Net::HTTP.start): options may not be given.
diff --git a/file.c b/file.c
index bc5071ed8d..99435829c9 100644
--- a/file.c
+++ b/file.c
@@ -3173,6 +3173,9 @@ realpath_internal(VALUE path, int strict)
     volatile VALUE unresolved_path;
     char *unresolved_names;
     VALUE loopcheck;
+
+    rb_secure(2);
+
     FilePathValue(path);
     unresolved_path = rb_str_dup_frozen(path);
     unresolved_names = skiproot(RSTRING_PTR(unresolved_path));