Re: Tracking down taint problems

[Doug MacEachern <do...@covalent.net>]

On Tue, 24 Apr 2001, Jamie Krasnoo wrote:

> I recently got this error:
> 
> Insecure dependency in eval while running with -T switch.
> Callback called exit.
> 
> Now, yes that tells me that something is wrong. What it doesn't tell me is
> where the problem is except for the fact that its somewhere in the current
> module that's being run. Is there a way that I could get mod_perl to fess up
> where the problem is?

if you can reproduce at will, use gdb:
% gdb httpd
(gdb) source mod_perl-x.xx/.gdbinit
(gdb) b Perl_croak
(gdb) run -X
... run request that causes error ...
(gdb) where
... stack printed here ...
(gdb) curinfo
... perl filename:linenumber printed here ...

RE: Tracking down taint problems

[Doug MacEachern <do...@covalent.net>]

On Thu, 14 Jun 2001, Rob Bloodgood wrote:
 
> Seriously, tho, do you think you could come up with a short list of
> definitions for those macros?  I was pretty excited to see them, once,
> except that I couldn't make them work. <sigh>  Even a comment w/ a usage:
> 
> AvFILL(<address>)

most of them (the C macros) are documented in Perl's perlapi.pod
the gdb macros are just the cpp expanded versions of the C macros, not
including some of the homebrewed ones like curinfo.

RE: Tracking down taint problems

[Rob Bloodgood <ro...@empire2.com>]

> if you can reproduce at will, use gdb:
> % gdb httpd
> (gdb) source mod_perl-x.xx/.gdbinit
> (gdb) b Perl_croak
> (gdb) run -X
> .... run request that causes error ...
> (gdb) where
> .... stack printed here ...
> (gdb) curinfo
> .... perl filename:linenumber printed here ...

OOOOOOOOOOOOOOOHHHHHHHHHHHHHHHHHH!!!!

Seriously, tho, do you think you could come up with a short list of
definitions for those macros?  I was pretty excited to see them, once,
except that I couldn't make them work. <sigh>  Even a comment w/ a usage:

AvFILL(<address>)

just to see what to feed the macro from gdb space?

Not like you have anything ELSE to do... (JUST KIDDING I can tell you've
been writing email *all day* by the posts that keep trickling into the
list).

L8r,
Rob