| CC: | neil.hemingway [...] netbanx.com |
| Subject: | Insecure dependency under taint in Log::Dispatch::Email |
When using Log::Dispatch::Email under taint mode, the following error is
generated:
Insecure dependency in eval_sv() while running with -T switch at
/export/home/netbanx/base/usr/lib/perl5/site_perl/5.8.8/Log/Dispatch/Email.pm
line 37.
The attached patch is a (very) simplistic fix for this.
| Subject: | log_dispatch_email.patch |
Index: ../base/usr/lib/perl5/site_perl/5.8.8/Log/Dispatch/Email.pm
===================================================================
--- ../base/usr/lib/perl5/site_perl/5.8.8/Log/Dispatch/Email.pm (revision 73)
+++ ../base/usr/lib/perl5/site_perl/5.8.8/Log/Dispatch/Email.pm (working copy)
@@ -12,6 +12,7 @@
our $VERSION = '1.19';
+my ($progname) = ($0 =~ /(.*)/);
sub new
{
@@ -19,7 +20,7 @@
my $class = ref $proto || $proto;
my %p = validate( @_, { subject => { type => SCALAR,
- default => "$0: log email" },
+ default => "$progname: log email" },
to => { type => SCALAR | ARRAYREF },
from => { type => SCALAR,
optional => 1 },