new problem with -Taint with CVS latest

Jason Remillard jremillardshop at letterboxes.org
Wed Mar 9 04:54:21 UTC 2005


Hi,

I have been having a problem with the latest (the tip of main branch) 
CVS version of bugzilla. When I hit index.cgi I get the following.

  Bugzilla has suffered an internal error. Please save this page and 
send it to jpr at clover with details of what you were doing at the time 
this message appeared.

URL: http://clover/bugzilla/index.cgi

Template->process() failed twice.
First error: Insecure dependency in rename while running with -T switch 
at /usr/local/lib/perl/5.6.1/Template/Document.pm line 287.
Second error: Insecure dependency in rename while running with -T switch 
at /usr/local/lib/perl/5.6.1/Template/Document.pm line 287.

This was working ok last week. One of the check in over the past week or 
so has caused this problem. I was able to reproduce this on a clean 
checkout, so I don't think it is caused by any local changes. I am 
running a debain stable box.  Template toolkit 2.08, perl version 5.6.1.

The line in Document.pm looks like it is attempting to copy a compiled 
template back into the bugzilla directory. I ran checksetup.pl after I 
updated, so I don't know why it is even attempting to do this.

Any Idea's?

Thanks
Jason.



More information about the developers mailing list