ports/177416: mail/postgrey has surfaced a bug in perl's taint checking

Mark Linimon linimon at lonesome.com
Sun Jun 23 06:30:03 UTC 2013


The following reply was made to PR ports/177416; it has been noted by GNATS.

From: Mark Linimon <linimon at lonesome.com>
To: bug-followup at FreeBSD.org
Cc:  
Subject: Re: ports/177416: mail/postgrey has surfaced a bug in perl's taint
 checking
Date: Sun, 23 Jun 2013 01:23:35 -0500

 ----- Forwarded message from Paul Beard <paulbeard at gmail.com> -----
 
 Date: Fri, 21 Jun 2013 14:16:48 -0700
 From: Paul Beard <paulbeard at gmail.com>
 To: Philip Paeps <philip at freebsd.org>
 Cc: freebsd-ports-bugs at FreeBSD.org
 Subject: Re: ports/177416: mail/postgrey has surfaced a bug in perl's taint checking
 X-Mailer: Apple Mail (2.1508)
 
 
 On Jun 21, 2013, at 2:13 PM, Philip Paeps <philip at freebsd.org> wrote:
 
 > I only tried with a UNIX socket, not with an INET socket, but the
 > culprit is likely the same: Socket.pm is pulling in some other module
 > that taints what its passing to the socket call.  Unfortunately, I
 > don't seem to have a Perl module on my system causing it to fail anymore
 > (after getting rid of Getopt::Long).
 
 On further testing, I found I can reliably cause it to hang without displaying the Taint error if I use a unix socket but it always works on a port. The presence of the port you found is the toggle. Nice work ;-) 
 --
 Paul Beard
 
 This space intentionally left blank. 
 
 ----- End forwarded message -----


More information about the freebsd-ports-bugs mailing list