* process.c (rb_f_system): fixed lack of security check before

  calling do_spawn() on win32. [ruby-talk:84555]


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@4861 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

1 files changed, 1 insertions, 0 deletions

diff --git a/process.c b/process.c
index 1920da2c44..ed7ae86dcd 100644
--- a/process.c
+++ b/process.c
@@ -976,6 +976,7 @@ rb_f_system(argc, argv)
 
     if (argc == 1 && prog == 0) {
 #if defined(_WIN32)
+	SafeStringValue(argv[0]);
 	status = do_spawn(P_WAIT, RSTRING(argv[0])->ptr);
 #else
 	status = proc_spawn(argv[0]);