in reply to Re: Insecure dependency message ?
in thread Insecure dependency message ?

I noticed from search.cpan.org: perl573delta - what's new for perl v5.7.3 , the following

11410 - fix a bug in the security taint checking of open()

13684 - introduce the -t option for gentler taint checking

As the version jump was from 5.6.1 to 5.8.1 , and the script crashed at a "sysopen", I assume this is related ?

Peter

Replies are listed 'Best First'.
Re: Re: Re: Insecure dependency message ?
by peterr (Scribe) on Jan 07, 2004 at 04:58 UTC
    This article, at http://twiki.org/cgi-bin/view/Support/ApacheUpgradeTaintError

    is also interesting, same version of Perl, same error message, and the following answer

    "It looks like =Net::SMTP and/or IO::Socket got more strict in regards to taint checking."

    The script that crashed uses Net::SMTP, but it hadn't got into _that_ subroutine when it crashed.

    Peter

[reply]

In Section Seekers of Perl Wisdom