From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <at@altlinux.ru>
Date: Thu, 26 Apr 2007 18:05:07 +0400
From: Alexey Tourbin <at@altlinux.ru>
To: ALT Linux Sisyphus discussion list <sisyphus@lists.altlinux.org>
Message-ID: <20070426140507.GV25908@solemn.turbinal>
Mail-Followup-To: ALT Linux Sisyphus discussion list
	<sisyphus@lists.altlinux.org>
References: <b966c1e40703020152o7854e951n2d5ce24e3f88a14f@mail.gmail.com>
	<b966c1e40704082344v34a70099o13dd01192258b2a5@mail.gmail.com>
	<461B8FE8.6040709@mmascience.ru> <462CA531.8050607@mmascience.ru>
	<20070426113505.GU25908@solemn.turbinal>
	<4630AFCE.8050304@tangramltd.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="9I0HVnGRacHebCDW"
Content-Disposition: inline
In-Reply-To: <4630AFCE.8050304@tangramltd.com>
Subject: Re: [sisyphus] =?koi8-r?b?V0FSTklORzogYW1hdmlzZC1uZXcgySDLz8TJ0s/X?=
	=?koi8-r?b?y8kg0MnTxc0=?=
X-BeenThere: sisyphus@lists.altlinux.org
X-Mailman-Version: 2.1.9rc1
Precedence: list
Reply-To: ALT Linux Sisyphus discussion list <sisyphus@lists.altlinux.org>
List-Id: ALT Linux Sisyphus discussion list <sisyphus.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/listinfo/sisyphus>,
	<mailto:sisyphus-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/sisyphus>
List-Post: <mailto:sisyphus@lists.altlinux.org>
List-Help: <mailto:sisyphus-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/sisyphus>,
	<mailto:sisyphus-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Apr 2007 14:05:08 -0000
Archived-At: <http://lore.altlinux.org/sisyphus/20070426140507.GV25908@solemn.turbinal/>
List-Archive: <http://lore.altlinux.org/sisyphus/>
List-Post: <mailto:sisyphus@altlinux.ru>


--9I0HVnGRacHebCDW
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Apr 26, 2007 at 04:57:34PM +0300, Slava Dubrovskiy wrote:
> Alexey Tourbin =D0=C9=DB=C5=D4:
> >>=EF=D4=CB=C1=D4=C9=CC=D3=D1 =CE=C1 perl-base-5.8.8-alt6 -  =CF=DB=C9=C2=
=CF=CB =CE=C5=D4.
> >>=F3=CF=C4=C5=D2=D6=C9=CD=CF=C5 =D6=D5=D2=CE=C1=CC=C1 (=C5=D3=CC=C9 =C9=
=CE=D4=C5=D2=C5=D3=CE=CF =D3=C2=CF=D2=DD=C9=CB=C1=CD)
> >>
> >># cat errors
> >>Apr 23 12:53:58 ns amavis[4720]: (04720-13) (!!)TROUBLE in check_mail:=
=20
> >>quar+notif FAILED: temporarily unable to quarantine: 451 4.5.0 Local=20
> >>delivery(1) to /var/spool/amavis/quarantine/virus-Cp3jMXD3DAZJ failed:=
=20
> >>Insecure dependency in sysopen while running with -T switch at=20
> >>/usr/lib/perl5/i386-linux/IO/File.pm line 180., id=3D04720-13 at=20
> >>/usr/sbin/amavisd line 9366.
> >>   =20
> >
> >=EB =D3=CF=D6=C1=CC=C5=CE=C9=C0, =CD=CE=C5 =DC=D4=CF =CE=C9 =CF =DE=C5=
=CD =CE=C5 =C7=CF=D7=CF=D2=C9=D4.  =EE=D5=D6=CE=CF =CF=D4=CC=C1=D6=C9=D7=C1=
=D4=D8.
> >=E5=D3=CC=C9 =CD=CF=D6=C5=D4=C5 =D0=CF=CD=CF=DE=D8 =D3 =CF=D4=CC=C1=C4=
=CB=CF=CA, =CD=CF=D6=CE=CF =D0=D2=CF=C4=CF=CC=D6=C9=D4=D8 =CF=C2=D3=D5=D6=
=C4=C5=CE=C9=C5.
> > =20
> =F5 =CD=C5=CE=D1 =D4=C5 =D6=C5 =CF=DB=C9=C2=CB=C9. =FE=D4=CF =CE=C1=C4=CF=
 =D3=C4=C5=CC=C1=D4=D8?

=F0=D2=C9=CC=CF=D6=C9=D4=D8 "=D0=CF =D6=C9=D7=CF=CD=D5" =D7=CF=D4 =DC=D4=CF=
=D4 =D0=C1=D4=DE, =C9 =D0=CF=CE=D1=D4=D8, =D7 =CB=C1=CB=CF=CD =CD=C5=D3=D4=
=C5
=D0=C5=D2=C5=C4=C1=C5=D4=D3=D1 =D0=D2=CF=D4=D5=C8=DB=C5=C5 =C9=CD=D1 =C6=C1=
=CA=CC=C1.  =E9 =D0=CF=DE=C5=CD=D5 =CF=CE=CF =D0=D2=CF=D4=D5=C8=CC=CF.

--- /usr/lib/perl5/i386-linux/IO/File.pm-	2007-04-25 13:49:44 +0000
+++ /usr/lib/perl5/i386-linux/IO/File.pm	2007-04-26 14:02:45 +0000
@@ -177,6 +177,11 @@ sub open {
 	my ($mode, $perms) =3D @_[2, 3];
 	if ($mode =3D~ /^\d+$/) {
 	    defined $perms or $perms =3D 0666;
+	    use Scalar::Util qw(tainted):
+	    if (tainted $file) {
+		    require Carp;
+		    Carp::cluck("file $file tainted");
+	    }
 	    return sysopen($fh, $file, $mode, $perms);
 	} elsif ($mode =3D~ /:/) {
 	    return open($fh, $mode, $file) if @_ =3D=3D 3;

--9I0HVnGRacHebCDW
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGMLGTfBKgtDjnu0YRAu7SAKCexpY5t2yElkCYY2+dgvUo5+BvngCeJvcc
Of5e905rvn43biLH8HHOCCk=
=2s+r
-----END PGP SIGNATURE-----

--9I0HVnGRacHebCDW--