[rt-devel] [cpan #5521] setgid taint error in Locale-Maketext

Michael S. Liebman m-liebman at northwestern.edu
Mon Mar 22 10:14:14 EST 2004


On Tue, Mar 02, 2004 at 12:21:20AM -0500, Jesse Vincent wrote:
> Can anyone try sean's recommendation and get a more solid error 
> report? 

Finally had the problem recur after I made the change. Here is the
error I'm receiving now.

System error
error:  	Insecure dependency in eval while running setgid at /usr/lib/perl5/5.8.3/Locale/Maketext/Guts.pm line 247.

Stack:
[/usr/lib/perl5/5.8.3/Locale/Maketext/Guts.pm:247]
[/usr/lib/perl5/5.8.3/Locale/Maketext.pm:195]
[/opt/rt3/lib/RT/CurrentUser.pm:360]
[/opt/rt3/lib/RT/Interface/Web.pm:217]
[/opt/rt3/local/html/Ticket/Update.html:149]
[/opt/rt3/share/html/autohandler:195]
while evallinguse strict; sub {
join '',
'Update ticket #',
($_[1], ),
' (',
($_[2], ),
')',
}
context:  	
...  	
244:  	push @code, "}\n";
245:  	
246:  	print @code if DEBUG;
247:  	my $sub = eval { eval(join '', @code) || die $@ };
248:  	die "$@ while evalling" . join('', @code) if $@; # Should be impossible.
249:  	return $sub;
250:  	}
251:  	
252:  	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
...  	
code stack:  	/usr/lib/perl5/5.8.3/Locale/Maketext/Guts.pm:248
/usr/lib/perl5/5.8.3/Locale/Maketext.pm:195
/opt/rt3/lib/RT/CurrentUser.pm:360
/opt/rt3/lib/RT/Interface/Web.pm:217
/opt/rt3/local/html/Ticket/Update.html:149
/opt/rt3/share/html/autohandler:195

Michael
-- 
Michael S. Liebman                      m-liebman at northwestern.edu
                  http://msl521.freeshell.org/
"I have vision and the rest of the world wears bifocals."
        -Paul Newman in "Butch Cassidy & the Sundance Kid"



More information about the Rt-devel mailing list