ports/177416: mail/postgrey has surfaced a bug in perl's taint checking

Paul Beard paulbeard at gmail.com
Fri Jun 21 21:16:54 UTC 2013


On Jun 21, 2013, at 2:13 PM, Philip Paeps <philip at freebsd.org> wrote:

> I only tried with a UNIX socket, not with an INET socket, but the
> culprit is likely the same: Socket.pm is pulling in some other module
> that taints what its passing to the socket call.  Unfortunately, I
> don't seem to have a Perl module on my system causing it to fail anymore
> (after getting rid of Getopt::Long).

On further testing, I found I can reliably cause it to hang without displaying the Taint error if I use a unix socket but it always works on a port. The presence of the port you found is the toggle. Nice work ;-) 
--
Paul Beard

This space intentionally left blank. 



More information about the freebsd-ports-bugs mailing list