[prev in list] [next in list] [prev in thread] [next in thread] 

List:       apache-modperl
Subject:    [error] Insecure dependency in unlink while running with -T switch at /usr/lib/perl5/site_perl/5.6.0
From:       "Martin Moss" <Martin_moss () btinternet ! com>
Date:       2003-02-28 3:48:41
[Download RAW message or body]

All,
Can Anybody see what I'm doing wrong here?

I have the following error :-
[error] Insecure dependency in unlink while running with -T switch at
/usr/lib/perl5/site_perl/5.6.0/Apache/Session/Store/File.pm line 106.

When I run the following subroutine:-

sub delete_session
{
  my $self=shift;
  my $session_id=shift;

  if ($session_id =~ /^(\w\w*)$/)
  {
    $session_id = $1;                     # $data now untainted
  }
  else
  {
    die "Bad Tainted data in $session_id";        # log this somewhere
  }

  die $self->{lh}->maketext("No Session_id given") unless ($session_id);

  my $t=time;
  my %session;

  my $Directory = My::Conf::APACHE_SESSIONS_TMPDIR;
  my $LockDirectory   = My::Conf::APACHE_SESSIONS_LOCKDIR;

  $Directory="XX_GRRRRR_XX$Directory"."XX_GRRRRR_XX";     #e.g.
'/path/to/dir/'
  $LockDirectory="XX_GRRRRR_XX$LockDirectory"."XX_GRRRRR_XX";  #e.g.
'/path/to/dir/'

  if ($Directory =~ /^XX_GRRRRR_XX(.*)XX_GRRRRR_XX$/)
  {
    $Directory = $1;                     # $data now untainted
  }
  else
  {
    die "Bad Tainted data in $Directory";        # log this somewhere
  }

  if ($LockDirectory =~ /^XX_GRRRRR_XX(.*)XX_GRRRRR_XX$/)
  {
    $LockDirectory = $1;                     # $data now untainted
  }
  else
  {
    die "Bad Tainted data in $LockDirectory";        # log this somewhere
  }

  #Load an existing session
 eval
  {
    tie %session, 'Apache::Session::File',$session_id,
            {
              Directory => Bficient::Conf::APACHE_SESSIONS_TMPDIR,
              LockDirectory   => Bficient::Conf::APACHE_SESSIONS_LOCKDIR,
            };
  };
  if ($@)
  {
       die $self->{lh}->maketext("Couldn't Load Apache::Session - \"[_1]\"
For '\"[_2]\"'",$@,$self->UserName);
  }

  print STDERR "Just about to unlink\n";
  tied(%session)->delete;
  return 1;
}

[prev in list] [next in list] [prev in thread] [next in thread]