Him In message "Re: Unexpected pointer behavior with unpack" on Sat, 15 Jul 2006 09:14:14 +0900, nobu / ruby-lang.org writes: |The latter. And I feel wrong to leave the original not tainted |now, though not sure whether it can cause any vulnerability. Agreed, but the string should be tainted at the time of packing, I think. A patch committed. matz.