[Rt-devel] 3.0.11rc3: Insecure Dependency errors in log

Jesse Vincent jesse at bestpractical.com
Sat May 22 23:46:13 EDT 2004


I've actually seen this error intermittently with RT under FastCGI
dating back to 3.0.8 or even earlier. There's _something_ related to
tempfiles that's being tainted. Because it's intermittent (and usually
handles on a second, third or later request, but not on a first request
ot a given process, I haven't been able to track it down. I'm pretty
sure, but not positive, that it's related to a module outside RT.
Sometimes it's in MIME::Entity. Sometimes in Text::Template. 

One way to cope is to run RT with SuExec in apache, rather than a setgid
mason_handler.fcgi.

On Sat, May 22, 2004 at 10:30:32PM +0200, Dirk Pape wrote:
> Hello Jesse,
> 
> I just tested again with rt 3.0.11rc3 (fastcgi setup, perl 5.8.3)  and 
> found following error in the log. Scrip 20 is our "AutoReply to Requestors" 
> scrip which I dont like to die.
> 
> This is not reproducible!
> Scrip 20 works well most times.
> Other Scrips (with different templates) are failing, too.
> 
> This happens about once or twice a day.
> 
> Dirk.
> 
> [Sat May 22 19:51:20 2004] [error]: Scrip 20 died. - Insecure dependency in 
> eval while
> running with -T switch at 
> /export/perl-5.8.3/lib/site_perl/5.8.3/Text/Template.pm line
> 319.
> 
> Stack:
>  [/export/perl-5.8.3/lib/site_perl/5.8.3/Text/Template.pm:319]
>  [/export/rt3/lib/RT/Template_Overlay.pm:384]
>  [/export/rt3/lib/RT/Template_Overlay.pm:315]
>  [/export/rt3/lib/RT/Action/SendEmail.pm:210]
>  [/export/rt3/lib/RT/ScripAction_Overlay.pm:199]
>  [/export/rt3/lib/RT/Scrip_Overlay.pm:414]
>  [/export/rt3/lib/RT/Scrip_Overlay.pm:357]
>  [/export/rt3/lib/RT/Scrips_Overlay.pm:196]
>  [/export/rt3/lib/RT/Transaction_Overlay.pm:118]
>  [/export/rt3/lib/RT/Ticket_Overlay.pm:3815]
>  [/export/rt3/lib/RT/Ticket_Overlay.pm:629]
>  [/export/rt3/lib/RT/Interface/Web.pm:348]
>  [/export/rt3/local/html/Ticket/Display.html:73]
>  [/export/rt3/local/html/Ticket/Create.html:291]
>  [/export/rt3/share/html/autohandler:196]
> (/export/rt3/lib/RT/Scrip_Overlay.pm:383)
> 
> _______________________________________________
> Rt-devel mailing list
> Rt-devel at lists.bestpractical.com
> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-devel

-- 


More information about the Rt-devel mailing list