RE: Tracking down taint problems

2001-06-14 Thread Doug MacEachern

On Thu, 14 Jun 2001, Rob Bloodgood wrote:
 
> Seriously, tho, do you think you could come up with a short list of
> definitions for those macros?  I was pretty excited to see them, once,
> except that I couldn't make them work.   Even a comment w/ a usage:
> 
> AvFILL()

most of them (the C macros) are documented in Perl's perlapi.pod
the gdb macros are just the cpp expanded versions of the C macros, not
including some of the homebrewed ones like curinfo.





RE: Tracking down taint problems

2001-06-14 Thread Rob Bloodgood

> if you can reproduce at will, use gdb:
> % gdb httpd
> (gdb) source mod_perl-x.xx/.gdbinit
> (gdb) b Perl_croak
> (gdb) run -X
>  run request that causes error ...
> (gdb) where
>  stack printed here ...
> (gdb) curinfo
>  perl filename:linenumber printed here ...

OOOHH

Seriously, tho, do you think you could come up with a short list of
definitions for those macros?  I was pretty excited to see them, once,
except that I couldn't make them work.   Even a comment w/ a usage:

AvFILL()

just to see what to feed the macro from gdb space?

Not like you have anything ELSE to do... (JUST KIDDING I can tell you've
been writing email *all day* by the posts that keep trickling into the
list).

L8r,
Rob




Re: Tracking down taint problems

2001-06-14 Thread Doug MacEachern

On Tue, 24 Apr 2001, Jamie Krasnoo wrote:

> I recently got this error:
> 
> Insecure dependency in eval while running with -T switch.
> Callback called exit.
> 
> Now, yes that tells me that something is wrong. What it doesn't tell me is
> where the problem is except for the fact that its somewhere in the current
> module that's being run. Is there a way that I could get mod_perl to fess up
> where the problem is?

if you can reproduce at will, use gdb:
% gdb httpd
(gdb) source mod_perl-x.xx/.gdbinit
(gdb) b Perl_croak
(gdb) run -X
... run request that causes error ...
(gdb) where
... stack printed here ...
(gdb) curinfo
... perl filename:linenumber printed here ...





Re: Tracking down taint problems

2001-04-24 Thread Stas Bekman

On Tue, 24 Apr 2001, Jamie Krasnoo wrote:

> I recently got this error:
>
> Insecure dependency in eval while running with -T switch.
> Callback called exit.
>
> Now, yes that tells me that something is wrong. What it doesn't tell me is
> where the problem is except for the fact that its somewhere in the current
> module that's being run. Is there a way that I could get mod_perl to fess up
> where the problem is?

You could try to use Carp with $SIG{__(DIE|WARN)__}. But mainly read the
perlsec manpage. Also see:
http://perl.apache.org/guide/perl.html#Exception_Handling_for_mod_perl
regarding the catching of exceptions.

_
Stas Bekman  JAm_pH --   Just Another mod_perl Hacker
http://stason.org/   mod_perl Guide  http://perl.apache.org/guide
mailto:[EMAIL PROTECTED]   http://apachetoday.com http://eXtropia.com/
http://singlesheaven.com http://perl.apache.org http://perlmonth.com/





Tracking down taint problems

2001-04-24 Thread Jamie Krasnoo

I recently got this error:

Insecure dependency in eval while running with -T switch.
Callback called exit.

Now, yes that tells me that something is wrong. What it doesn't tell me is
where the problem is except for the fact that its somewhere in the current
module that's being run. Is there a way that I could get mod_perl to fess up
where the problem is?

Jamie Krasnoo
[EMAIL PROTECTED]