taint issues in utf8_heavy.pl

R

rider.hibiki

Has anyone come across taint issues in utf8_heavy.pl under perl 5.8.5
I've been getting Insecure Dependency errors in utf8_heavy.pl when it
is doing the files in unicore/gc and I can't work out where they're
coming from.
I've set some debug around the area its failing.

warn "DJR attempting to do [$file]";
use Scalar::Util;
warn "DJR file variable is tainted ?". Scalar::Util::tainted($file);
$list = do $file; # this is the original bit thats failing.

This gives me the following in my error logs.

[Wed Aug 23 12:21:08 2006] null: DJR attempting to do
[unicore/lib/gc_sc/Word.pl] at /usr/lib/perl5/5.8.5/utf8_heavy.pl line
185.
[Wed Aug 23 12:21:08 2006] null: DJR file variable is tainted ?0 at
/usr/lib/perl5/5.8.5/utf8_heavy.pl line 187.
[Wed Aug 23 12:21:08 2006] [error] [Wed Aug 23 12:21:08 2006] null:
Insecure dependency in require while running with -T switch at
/usr/lib/perl5/5.8.5/utf8_heavy.pl line 188.\n

I'm not sure how I could be getting an Insecure dependency when the
only thing being used is the $file variable and Scalar::Util shows that
variable to not be tainted.

Thanks
Dave
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Members online

Forum statistics

Threads
473,969
Messages
2,570,161
Members
46,705
Latest member
Stefkari24

Latest Threads

Top