There's more than one way to do things PerlMonks

### Re^3: SOAP::Lite - Insecure dependency in eval while running with -T

 on Mar 25, 2011 at 12:47 UTC ( #895471=note: print w/replies, xml ) Need Help??

• "Bad stub:" is not mentioned anywhere in OPs message
• "Code execution error" doesn't appear in SOAP/Lite.pm
• "returned error" doesn't appear in SOAP/Lite.pm
• Comment on Re^3: SOAP::Lite - Insecure dependency in eval while running with -T

Replies are listed 'Best First'.
Re^4: SOAP::Lite - Insecure dependency in eval while running with -T
by moritz (Cardinal) on Mar 25, 2011 at 12:55 UTC
"Bad stub:" is not mentioned anywhere in OPs message

If the eval() dies due to taint modus (and not just returns undef because of normal failure), the or croak part will never executed. So not relevant.

$perl -Te 'eval shift or die "NO"' foo Insecure dependency in eval while running with -T switch at -e line 1.$ no NO printed, see?
[download]
• Code execution error" doesn't appear in SOAP/Lite.pm
• "returned error" doesn't appear in SOAP/Lite.pm

So it was wrapped in some other code that caught the error, and augmented with additional information. It looks to me that the line in question is still the source of the error, even if indirectly reported.

Gah, I kept focusing on $_ being a hash key and thus not tainted Cheap fix sub generate_stub { ...$self->{'_stub'} = $1 if$self->{'_stub'} =~ /^(.*)/;
return \$self->stub;
}
[download]

Create A New User
Node Status?
node history
Node Type: note [id://895471]
help
Chatterbox?
 [thezip]: Is there an analogy for '&' (ie. run commandline process in background) for Windows commandline? [Corion]: thezip: start "some title" path\to\that\ application, but that will open another console window [Corion]: thezip: If you want to confuse your users, use system(1, "that\\command" );, which will make Perl launch it in the background [Corion]: That will keep the console window open even though the user can't type into it anymore [thezip]: So I have a script that generates a log file. After script completion, I want tohave VIM open this logfile. [thezip]: i don't get the command line "back" until I close VIM. No what I want to happen... [thezip]: I currently don't have access to CYGWIN, else I'd just do a tail -f on the logfile.

How do I use this? | Other CB clients
Other Users?
Others musing on the Monastery: (11)
As of 2017-03-27 18:48 GMT
Sections?
Information?
Find Nodes?
Leftovers?
Voting Booth?
Should Pluto Get Its Planethood Back?

Results (321 votes). Check out past polls.