in reply to Revisiting Insecure dependency in mkdir while running with -T switch at ... File/Temp.pm line 542

Does this look like some obscure bug in these versions of perl?

At a glance, the grid seems to indicate a problem with certain versions. But if you look more closely, the problem seems to be specific to the tests run by BINGOS, not specific to a version. This is most obvious is you look at the tests for 4.0.1 on 5.18.4. Every one of BINGOS's tests fails due to a taint error, while neither DCANTRELL's nor Slaven Rezić's tests do.

Have you spoken to BINGOS?

  • Comment on Re: Revisiting Insecure dependency in mkdir while running with -T switch at ... File/Temp.pm line 542

Replies are listed 'Best First'.
Re^2: Revisiting Insecure dependency in mkdir while running with -T switch at ... File/Temp.pm line 542
by sidney (Acolyte) on Apr 21, 2024 at 23:42 UTC
    This grid is a better one to look at. SpamAssassin 4.0.1 test grid has other things going on. The Acme::TaintTest module I wrote is supposed to isolate just this one problem. Since it only happens on certain test machines, I have to upload a test and then wait for as many of the relevant test machines as possible to happen to pick it up. As of the time I'm writing this, that grid for Acme-TaintTest 0.0.8-rc1b-TRIAL does show the taint error in some, but not all or most, of BINGOS and Slaven Rezić's machines. I tried reaching out to them when all I knew about this was what I could glean from the SpamAssassin test failures, but that didn't go anywhere. I'm hoping to narrow things down much more with the Acme::TaintTest series of tests and the conversation here before I reach out to them again.