aboutsummaryrefslogtreecommitdiff
path: root/doc/bugs/img_plugin_causes_taint_failure.mdwn
blob: e2b85e4983e32133a049d6bfd7f152ee27a49348 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
The img plugin causes a taint failure if one tries to link a scaled image, e.g.

    \[[img foo.png size=64x64]]

    .ikiwiki.setup: Insecure dependency in mkdir while running with -T switch at /usr/lib/perl5/vendor_perl/5.8.8/IkiWiki.pm line 360.
    BEGIN failed--compilation aborted at (eval 5) line 109.

If one omits the size argument it works. And if it worked once the taint failure will not happen again unless one rm -r's the destdir.

Seen with ikiwiki 2.30

> And what version of perl? See [[Insecure_dependency_in_mkdir]] et al.
> Also, the debian build of ikiwiki has taint checking disabled to avoid
> this perl bug. Did you build your own? Set NOTAINT=1 when building..
> --[[Joey]]

>> perl-5.8.8, I've created a package for openSUSE. Will file perl bug there as well then.

I've gone ahead and turned off taint checking by default now.
[[done]]