[Rt-devel] insecure dependency errors with version 3.0.10 and later

[Jesse Vincent]

On Wed, May 19, 2004 at 08:57:35PM +0200, Dirk Pape wrote:
> Hello,
> 
> I just want to mention, that we have some of these errors (three a day) on 
> the web interface (see below).
> 
> They may have to do with some of my mods, but they did not appear before 
> 3.0.10. Did anything change with perl tainted mode with 3.0.10?

No, but you just told us you switched from mod_perl to FastCGI. This is
known to be an issue with up to 3.0.10 and FastCGI.  It _Should_ be
better with 3.0.11. (We're running FastCGI exclusively right now)



> Any hint where to dig?
> 
> Dirk.
> 
> 
> 
> System error
> error: 	Insecure dependency in eval while running with -T switch at 
> /export/perl-5.8.3/lib/5.8.3/Locale/Maketext/Guts.pm line 247.
> 	
> context: 	
> ... 		
> 243: 	unshift @code, "use strict; sub {\n";	
> 244: 	push @code, "}\n";	
> 245: 		
> 246: 	print @code if DEBUG;	
> 247: 	my $sub = eval(join '', @code);	
> 248: 	die "$@ while evalling" . join('', @code) if $@; # Should be 
> impossible.	
> 249: 	return $sub;	
> 250: 	}	
> 251: 		
> ... 		
> code stack: 	/export/perl-5.8.3/lib/5.8.3/Locale/Maketext/Guts.pm:247
> /export/perl-5.8.3/lib/5.8.3/Locale/Maketext.pm:189
> /export/rt3/lib/RT/CurrentUser.pm:365
> /export/rt3/lib/RT/Base.pm:97
> /export/rt3/lib/RT/Ticket_Overlay.pm:1485
> /export/rt3/lib/RT/Ticket_Overlay.pm:581
> /export/rt3/lib/RT/Interface/Web.pm:348
> /export/rt3/local/html/Ticket/Display.html:73
> /export/rt3/local/html/Ticket/Create.html:291
> /export/rt3/share/html/autohandler:196
> 
> 
> _______________________________________________
> Rt-devel mailing list
> Rt-devel at lists.bestpractical.com
> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-devel

--