$ ct diff -diff -pred locklbtype
61,64c61,67
< my @untaintedbits;
< foreach (split //, $owner) {
<   if (/([-\@\w.])/) {
<     push @untaintedbits, $1;
---
> sub untaint($) {
>   my $tainted = shift;
>   my @untaintedbits;
>   foreach (split //, $tainted) {
>     if (m%([-\@\w.:/])%) {
>       push @untaintedbits, $1;
>     }
65a69
>   return join '', @untaintedbits;
67c71,72
< my $uowner = join '', @untaintedbits;
---
> my $uowner = untaint($owner);
> map { $_ = untaint($_) } @lbtype;
$ ~eeivob05/bin/locklbtype -vob /vobs/atcctest -l MG -u
Tainted(eaccount): 0, eeivob05
Tainted(log): 0, /home/eeivob05/RANOS_autobuild/builds/logs/lbunlock.log
Tainted(owner): 1, vobadm13
Tainted(uowner): 0, vobadm13
Tainted(op): 0, unlock
Tainted(lbtype): 0, lbtype:MG@/vobs/atcctest
Tainted(ssh): 0, /usr/bin/ssh
Tainted(host): 0, eieatx008
Tainted(binct): 0, /opt/rational/clearcase/bin/cleartool
Unlocked label type "MG".