R
rider.hibiki
Has anyone come across taint issues in utf8_heavy.pl under perl 5.8.5
I've been getting Insecure Dependency errors in utf8_heavy.pl when it
is doing the files in unicore/gc and I can't work out where they're
coming from.
I've set some debug around the area its failing.
warn "DJR attempting to do [$file]";
use Scalar::Util;
warn "DJR file variable is tainted ?". Scalar::Util::tainted($file);
$list = do $file; # this is the original bit thats failing.
This gives me the following in my error logs.
[Wed Aug 23 12:21:08 2006] null: DJR attempting to do
[unicore/lib/gc_sc/Word.pl] at /usr/lib/perl5/5.8.5/utf8_heavy.pl line
185.
[Wed Aug 23 12:21:08 2006] null: DJR file variable is tainted ?0 at
/usr/lib/perl5/5.8.5/utf8_heavy.pl line 187.
[Wed Aug 23 12:21:08 2006] [error] [Wed Aug 23 12:21:08 2006] null:
Insecure dependency in require while running with -T switch at
/usr/lib/perl5/5.8.5/utf8_heavy.pl line 188.\n
I'm not sure how I could be getting an Insecure dependency when the
only thing being used is the $file variable and Scalar::Util shows that
variable to not be tainted.
Thanks
Dave
I've been getting Insecure Dependency errors in utf8_heavy.pl when it
is doing the files in unicore/gc and I can't work out where they're
coming from.
I've set some debug around the area its failing.
warn "DJR attempting to do [$file]";
use Scalar::Util;
warn "DJR file variable is tainted ?". Scalar::Util::tainted($file);
$list = do $file; # this is the original bit thats failing.
This gives me the following in my error logs.
[Wed Aug 23 12:21:08 2006] null: DJR attempting to do
[unicore/lib/gc_sc/Word.pl] at /usr/lib/perl5/5.8.5/utf8_heavy.pl line
185.
[Wed Aug 23 12:21:08 2006] null: DJR file variable is tainted ?0 at
/usr/lib/perl5/5.8.5/utf8_heavy.pl line 187.
[Wed Aug 23 12:21:08 2006] [error] [Wed Aug 23 12:21:08 2006] null:
Insecure dependency in require while running with -T switch at
/usr/lib/perl5/5.8.5/utf8_heavy.pl line 188.\n
I'm not sure how I could be getting an Insecure dependency when the
only thing being used is the $file variable and Scalar::Util shows that
variable to not be tainted.
Thanks
Dave