$> cat bug.pl
#!/usr/bin/perl -wT
    %ENV = ();
    $ENV{PATH} = '/bin:/usr/bin:/usr/local/bin';

    use File::Temp qw(tempdir);

    require Inline;

    my $dir = tempdir( CLEANUP => 1 );

    Inline->import('C', 'Config' => 'DIRECTORY' => $dir, 'UNTAINT' => 1);

    Inline->bind(C => <<'EOC');
    int add(int a, int b) {
        return a+b;
    }
EOC

print "add(1, 4) == ", add(1,4), "\n";

$> perl -wT bug.pl
Insecure dependency in rmdir while running with -T switch at blib/lib/Inline.pm 
(autosplit into blib/lib/auto/Inline/rmpath.al) line 1194.
$> perl -e'use Inline 99999'
Inline version 99999 required--this is only version 0.44 at -e line 1.

I guess that something isn't being UNTAINTed sufficiently somewhere.

--------------------------------------------------------------------------------
Philippe M. Chiasson m/gozer\@(apache|cpan|ectoplasm)\.org/ GPG KeyID : 88C3A5A5
http://gozer.ectoplasm.org/     F9BF E0C2 480E 7680 1AE5 3631 CB32 A107 88C3A5A5

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to