[please CC me on replies, I'm not on the list. Thanks!]

Hi,

First kudos for the cool module :)

Apparently Inline.pm is not taint clean, I've discovered it while using
it with mod_perl, but here is a simple example that reproduces the
problem:

foo:
----
use Inline C => <<'END_OF_C_CODE';
  void foo(){
      int p=1;
  }
END_OF_C_CODE

# perl -wT foo
Insecure dependency in eval while running with -T switch at
/usr/lib/perl5/site_perl/5.6.0/Inline.pm line 350.
BEGIN failed--compilation aborted at a line 6.

I use Inline 0.31, perl 5.6.0.

This example is a part of the package that was installed as it explained
in the module's man page. And once installed system wide it works for the
plain scripts, but I suppose that a check of the up-to-date is being done
on the fly and that's where it fails under taint mode.

Since I run all my mod_perl code under taint mode it's not a solution to
just turn it off, since you cannot do it for some specific script.

Thanks!

_____________________________________________________________________
Stas Bekman              JAm_pH     --   Just Another mod_perl Hacker
http://stason.org/       mod_perl Guide  http://perl.apache.org/guide
mailto:[EMAIL PROTECTED]   http://apachetoday.com http://logilune.com/
http://singlesheaven.com http://perl.apache.org http://perlmonth.com/


Reply via email to