develooper Front page | perl.perl5.porters | Postings from May 2008

Re: Taint (PL_tainting, SvTAINTED_on, SvTAINTED_off, SvTAINT)

Thread Previous | Thread Next
From:
David Landgren
Date:
May 8, 2008 12:58
Subject:
Re: Taint (PL_tainting, SvTAINTED_on, SvTAINTED_off, SvTAINT)
Message ID:
48235B78.2030108@landgren.net
Paul Fenwick wrote:

> Now let's imagine it's running setuid, and taint-mode is not automatically
> enabled.  I can own your machine with:
> 
>     PERL5LIB=/home/h4x0r/p5lib ./hello.pl
> 
> The contents of /home/h4x0r/p5lib/strict.pm is left as an exercise for the
> reader.

PERL5LIB is ignored when tainting is active.

David
Thread Previous | Thread Next

nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About