comment on

My Perl script runs with taint mode on and in normal use does not report any taint warnings. However, when I try and run it under the debugger (-d) it

becomes difficult to see what is going on as every command results in pages of "Insecure dependency" warnings. e.g. just typing h (for help) results in:

Insecure dependency in sprintf while running with -t switch at /usr/sh
+are/perl/5.10/overload.pm line 99.
Insecure dependency in sprintf while running with -t switch at /usr/sh
+are/perl/5.10/overload.pm line 99.
Insecure dependency in open while running with -t switch at /usr/local
+/lib/perl/5.10.0/Term/ReadLine/Gnu.pm line 620.
 at /usr/local/lib/perl/5.10.0/Term/ReadLine/Gnu.pm line 620
    Term::ReadLine::Gnu::Var::FETCH('Term::ReadLine::Gnu::Var=SCALAR(0
+xb318148)') called at /usr/local/lib/perl/5.10.0/Term/ReadLine/Gnu.pm
+ line 298
    Term::ReadLine::Gnu::readline('Term::ReadLine=HASH(0xb29dc98)', ' 
+ DB<1> ') called at /usr/share/perl/5.10/perl5db.pl line 6414
    DB::readline('  DB<1> ') called at /usr/share/perl/5.10/perl5db.pl
+ line 2227
    DB::DB called at /usr/share/perl/5.10/perl5db.pl line 9451
    DB::fake::at_exit() called at /usr/share/perl/5.10/perl5db.pl line
+ 9022
    DB::END() called at queued.pl line 11059
    eval {...} called at queued.pl line 11059
Insecure dependency in sprintf while running with -t switch at /usr/sh
+are/perl/5.10/overload.pm line 99.
Insecure dependency in sprintf while running with -t switch at /usr/sh
+are/perl/5.10/overload.pm line 99.
Insecure dependency in sprintf while running with -t switch at /usr/sh
+are/perl/5.10/overload.pm line 99.
Insecure dependency in open while running with -t switch at /usr/local
+/lib/perl/5.10.0/Term/ReadLine/Gnu.pm line 656.
 at /usr/local/lib/perl/5.10.0/Term/ReadLine/Gnu.pm line 656
    Term::ReadLine::Gnu::Var::STORE('Term::ReadLine::Gnu::Var=SCALAR(0
+xb318148)', 'Term::ReadLine::Gnu::Var=GLOB(0xb62ac08)') called at /us
+r/local/lib/perl/5.10.0/Term/ReadLine/Gnu.pm line 298
    Term::ReadLine::Gnu::readline('Term::ReadLine=HASH(0xb29dc98)', ' 
+ DB<1> ') called at /usr/share/perl/5.10/perl5db.pl line 6414
    DB::readline('  DB<1> ') called at /usr/share/perl/5.10/perl5db.pl
+ line 2227
    DB::DB called at /usr/share/perl/5.10/perl5db.pl line 9451
    DB::fake::at_exit() called at /usr/share/perl/5.10/perl5db.pl line
+ 9022
    DB::END() called at queued.pl line 11059
    eval {...} called at queued.pl line 11059
[download]

sometimes a set break point is not stopped at
simply typing c to start running ends up in the program working differently than when not run in the debugger (it hangs in a read on a socket it normally has no problems with).

The latter two of these makes it impossible to debug in taint mode. If run without taint mode (no -t on the shebang line or the command line) it seems to work fine in the debugger. Obviously I can debug out of taint mode but I wondered if anyone else had come across this and had any other advice.

In reply to Problems running debugger when in taint mode by mje

Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!

Titles consisting of a single word are discouraged, and in most cases are disallowed outright.

Read Where should I post X? if you're not absolutely sure you're posting in the right place.

Please read these before you post! —

Posts may use any of the Perl Monks Approved HTML tags:

a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr

You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)

	For:		Use:
	&		`&`
	<		`<`
	>		`>`
	[		`[`
	]		`]`

Link using PerlMonks shortcuts! What shortcuts can I use for linking?

See Writeup Formatting Tips and other pages linked from there for more info.