From owner-freebsd-ports-bugs@FreeBSD.ORG Wed Mar 27 16:20:00 2013 Return-Path: Delivered-To: freebsd-ports-bugs@smarthost.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id B27579F0 for ; Wed, 27 Mar 2013 16:20:00 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) by mx1.freebsd.org (Postfix) with ESMTP id 973D0AB5 for ; Wed, 27 Mar 2013 16:20:00 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.6/8.14.6) with ESMTP id r2RGK0gB023207 for ; Wed, 27 Mar 2013 16:20:00 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.6/8.14.6/Submit) id r2RGK0RR023206; Wed, 27 Mar 2013 16:20:00 GMT (envelope-from gnats) Resent-Date: Wed, 27 Mar 2013 16:20:00 GMT Resent-Message-Id: <201303271620.r2RGK0RR023206@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, paulbeard@gmail.com Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 5415E80C for ; Wed, 27 Mar 2013 16:17:14 +0000 (UTC) (envelope-from paulbeard@gmail.com) Received: from mail-pb0-f51.google.com (mail-pb0-f51.google.com [209.85.160.51]) by mx1.freebsd.org (Postfix) with ESMTP id 339D3A81 for ; Wed, 27 Mar 2013 16:17:14 +0000 (UTC) Received: by mail-pb0-f51.google.com with SMTP id rr4so2640515pbb.24 for ; Wed, 27 Mar 2013 09:17:08 -0700 (PDT) Received: from mail.thistledew.org (c-67-161-86-33.hsd1.wa.comcast.net. [67.161.86.33]) by mx.google.com with ESMTPS id hs8sm21973776pbc.27.2013.03.27.09.17.06 (version=TLSv1 cipher=RC4-SHA bits=128/128); Wed, 27 Mar 2013 09:17:07 -0700 (PDT) Received: by mail.thistledew.org (Postfix, from userid 0) id E12F211585; Wed, 27 Mar 2013 09:17:04 -0700 (PDT) Message-Id: <20130327161704.E12F211585@mail.thistledew.org> Date: Wed, 27 Mar 2013 09:17:04 -0700 (PDT) From: "Charlie &" To: FreeBSD-gnats-submit@freebsd.org X-Send-Pr-Version: 3.113 Subject: ports/177416: postgrey has surfaced a bug in perl's taint checking X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: paulbeard@gmail.com List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Mar 2013 16:20:00 -0000 >Number: 177416 >Category: ports >Synopsis: postgrey has surfaced a bug in perl's taint checking >Confidential: no >Severity: serious >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Wed Mar 27 16:20:00 UTC 2013 >Closed-Date: >Last-Modified: >Originator: Charlie & >Release: FreeBSD 8.3-RELEASE i386 >Organization: none >Environment: System: FreeBSD shuttle.paulbeard.org 8.3-RELEASE FreeBSD 8.3-RELEASE #3: Thu Aug 30 16:34:02 PDT 2012 root@shuttle.paulbeard.org:/usr/obj/usr/src/sys/SHUTTLE i386 >Description: postgrey seems to have surfaced a bug in perl's taint checking. Running it as an rc script or in the service infrastructue doesn't reveal anything, it just silently exits, but on the commandline you get this: postgrey --inet=10023 --pidfile=/var/run/postgrey.pid --user=postgrey --group=postgrey --dbdir=/var/db/postgrey 2013/03/27-08:53:46 postgrey (type Net::Server::Multiplex) starting! pid(45305) Resolved [localhost]:10023 to [::1]:10023, IPv6 Resolved [localhost]:10023 to [::1]:10023, IPv6 Resolved [localhost]:10023 to [127.0.0.1]:10023, IPv4 Resolved [localhost]:10023 to [127.0.0.1]:10023, IPv4 Duplicate configuration (TCP) on [::1]:10023 with IPv6) - skipping Duplicate configuration (TCP) on [127.0.0.1]:10023 with IPv4) - skipping Binding to TCP port 10023 on host ::1 with IPv6 Insecure dependency in socket while running with -T switch at /usr/local/lib/perl5/site_perl/5.14.2/mach/IO/Socket.pm line 80. If you switch to domain socket, rather than a port, it will run but you can't daemonize it with the -d flag. You can use regular job control (fg/bg/ampersand) but that doesn't work very well at boot time. Your boot process may well hang waiting on the &. Or turn off taint checking in postgrey. >How-To-Repeat: just run as normal >Fix: no idea All perl modules have been rebuilt from source (deinstalled/reinstalled from fresh distfiles) as has perl itself. System has been rebooted. There are similar reports here: http://www.perlmonks.org/?node_id=363466 http://forums.gentoo.org/viewtopic-t-954454.html?sid=c01c137a57d5751924610093a06980f8 If you switch to domain socket, rather than a port, it will run but you can't daemonize it with the -d flag. So, not ideal. Or turn off the -T option. Your call. >Release-Note: >Audit-Trail: >Unformatted: