[Bug 7140] DKIM/SPF Insecure dependency in require

[bu...@bugzilla.spamassassin.org]

https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7140

--- Comment #1 from Mark Martinec <Ma...@ijs.si> ---
> Receiving "Insecure dependency in require while running with -T switch at
> /usr/share/perl5/vendor_perl/Mail/SPF/Server.pm line 28." when running
> spamassassin from the command-line on an mbox:
> 
> However, if I run it on a non-mbox message, it invariably passes without
> any problems loading SPF and DKIM support.

Could you please try the following workaround:

--- lib/Mail/SpamAssassin/ArchiveIterator.pm    (revision 1660694)
+++ lib/Mail/SpamAssassin/ArchiveIterator.pm    (working copy)
@@ -417,7 +417,10 @@
 sub _run_mailbox {
   my ($self, $class, $format, $where, $date) = @_;

-  my ($file, $offset) = ($where =~ m/(.*)\.(\d+)$/);
+  my ($file, $offset);
+  { local($1,$2);  # Bug 7140 (avoids perl bug)
+    ($file, $offset) = ($where =~ m/(.*)\.(\d+)$/);
+  }
   my @msg;
   my $header;
   if (!_mail_open($file)) {



The perl bug seems to be fixed in 5.20.2, likely related
to [perl #122669]

  https://rt.perl.org/Public/Bug/Display.html?id=122669

which is reported in perldelta as fixed with 5.20.2 :

  Tainted constants evaluated at compile time no longer
  cause unrelated statements to become tainted. [perl #122669]

-- 
You are receiving this mail because:
You are the assignee for the bug.