Taint problems

John Wilcock john at tradoc.fr
Mon May 9 17:20:56 IST 2011


Le 21/04/2011 20:25, Rick Cooper a écrit :
> This might be something Julian wants to revisit with so many people
> using perl 5.10+

I've just been hit by this after upgrading perl from 5.12.2 to 5.12.3 on 
a gentoo box, only solved by adding -U in /usr/sbin/MailScanner.

Julian, any chance of taking a look at all these taint errors?

Insecure dependency in open while running with -T switch at 
/usr/lib/MailScanner/MailScanner/Lock.pm line 358.
Insecure dependency in chown while running with -T switch at 
/usr/lib/MailScanner/MailScanner/Message.pm line 538.
Insecure dependency in open while running with -T switch at 
/usr/lib64/perl5/vendor_perl/5.12.2/x86_64-linux/IO/File.pm line 185, 
<$fh> line 6.
Insecure dependency in chdir while running with -T switch at 
/usr/lib/MailScanner/MailScanner/Message.pm line 2415.
Insecure dependency in open while running with -T switch at 
/usr/lib64/perl5/vendor_perl/5.12.2/x86_64-linux/IO/File.pm line 185.
Insecure dependency in chown while running with -T switch at 
/usr/lib/MailScanner/MailScanner/Message.pm line 1377.
Insecure dependency in open while running with -T switch at 
/usr/lib/MailScanner/MailScanner/Lock.pm line 358.
Insecure dependency in chmod while running with -T switch at 
/usr/lib/MailScanner/MailScanner/PFDiskStore.pm line 379.
Insecure dependency in utime while running with -T switch at 
/usr/lib/MailScanner/MailScanner/PFDiskStore.pm line 412.
Insecure dependency in rename while running with -T switch at 
/usr/lib/MailScanner/MailScanner/PFDiskStore.pm line 413.
Insecure dependency in unlink while running with -T switch at 
/usr/lib/MailScanner/MailScanner/PFDiskStore.pm line 173.

John.

-- 
-- Over 4000 webcams from ski resorts around the world - www.snoweye.com
-- Translate your technical documents and web pages    - www.tradoc.fr


More information about the MailScanner mailing list