taint issues in utf8_heavy.pl

Discussion in 'Perl Misc' started by rider.hibiki@gmail.com, Aug 23, 2006.

  1. Guest

    Has anyone come across taint issues in utf8_heavy.pl under perl 5.8.5
    I've been getting Insecure Dependency errors in utf8_heavy.pl when it
    is doing the files in unicore/gc and I can't work out where they're
    coming from.
    I've set some debug around the area its failing.

    warn "DJR attempting to do [$file]";
    use Scalar::Util;
    warn "DJR file variable is tainted ?". Scalar::Util::tainted($file);
    $list = do $file; # this is the original bit thats failing.

    This gives me the following in my error logs.

    [Wed Aug 23 12:21:08 2006] null: DJR attempting to do
    [unicore/lib/gc_sc/Word.pl] at /usr/lib/perl5/5.8.5/utf8_heavy.pl line
    185.
    [Wed Aug 23 12:21:08 2006] null: DJR file variable is tainted ?0 at
    /usr/lib/perl5/5.8.5/utf8_heavy.pl line 187.
    [Wed Aug 23 12:21:08 2006] [error] [Wed Aug 23 12:21:08 2006] null:
    Insecure dependency in require while running with -T switch at
    /usr/lib/perl5/5.8.5/utf8_heavy.pl line 188.\n

    I'm not sure how I could be getting an Insecure dependency when the
    only thing being used is the $file variable and Scalar::Util shows that
    variable to not be tainted.

    Thanks
    Dave
     
    , Aug 23, 2006
    #1
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Johann C. Rocholl

    Taint (like in Perl) as a Python module: taint.py

    Johann C. Rocholl, Feb 5, 2007, in forum: Python
    Replies:
    5
    Views:
    491
    Johann C. Rocholl
    Feb 6, 2007
  2. Ben
    Replies:
    17
    Views:
    256
  3. Brad Baxter
    Replies:
    1
    Views:
    154
    Ben Morrow
    Sep 1, 2004
  4. David Solimano

    Re: Missing utf8_heavy.pl

    David Solimano, Apr 7, 2012, in forum: Perl
    Replies:
    0
    Views:
    1,547
    David Solimano
    Apr 7, 2012
  5. Peter J. Holzer

    Re: Missing utf8_heavy.pl

    Peter J. Holzer, Apr 8, 2012, in forum: Perl Misc
    Replies:
    1
    Views:
    783
    Peter J. Holzer
    Apr 9, 2012
Loading...

Share This Page