https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7629

Bill Cole <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |WONTFIX

--- Comment #14 from Bill Cole <[email protected]> ---
I reproduced the bug on a CentOS 7 machine with the stock Perl (5.16.3) and
unmodified SA 3.4.2 code. It is occurring when the Pyzor plugin launches a
helper process and needs a safe pipe to it, in pyzor_report() calling
M:SA:Util->helper_app_pipe_open() which calls setuid_to_euid(). In my testing I
found that $) was already broken in M:SA:Plugin::Pyzor->pyzor_report() so
there's not much point in continuing to troubleshoot in M:SA:Util. 

Given the strange breakage (apparently the first element in $( and $) getting
silently replaced by a null?) I was pretty sure that this was a problem in Perl
itself, not a consequence of SA code. To test this, I built an alternative perl
(5.18.4) with default build settings and built SA against it. This DID NOT
exhibit the same problem. It also is not reproducible on my personal system
(MacOS 10.6.8 Perl 5.26.) I believe this in dictates it to be a problem with
the RH perl build, which uses '-D_FORTIFY_SOURCE=2' and has been problematic
before (see bug 7591.)

The workarounds for this *cosmetic* issue are:

1. Build and use a bespoke Perl without GCC's '-D_FORTIFY_SOURCE=2' flag.
2. Comment out the line causing this (it's just informational logging
anyway...) 
3. Disable Pyzor
4. Run on a different distribution family of Linux (e.g. Debian/Ubuntu, SuSE,
etc.) or on a different OS.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to