3.0.11rc3: Insecure Dependency errors in log

Hello Jesse,

I just tested again with rt 3.0.11rc3 (fastcgi setup, perl 5.8.3) and
found following error in the log. Scrip 20 is our "AutoReply to Requestors"
scrip which I dont like to die.

This is not reproducible!
Scrip 20 works well most times.
Other Scrips (with different templates) are failing, too.

This happens about once or twice a day.

Dirk.

[Sat May 22 19:51:20 2004] [error]: Scrip 20 died. - Insecure dependency in
eval while
running with -T switch at
/export/perl-5.8.3/lib/site_perl/5.8.3/Text/Template.pm line
319.

Stack:
[/export/perl-5.8.3/lib/site_perl/5.8.3/Text/Template.pm:319]
[/export/rt3/lib/RT/Template_Overlay.pm:384]
[/export/rt3/lib/RT/Template_Overlay.pm:315]
[/export/rt3/lib/RT/Action/SendEmail.pm:210]
[/export/rt3/lib/RT/ScripAction_Overlay.pm:199]
[/export/rt3/lib/RT/Scrip_Overlay.pm:414]
[/export/rt3/lib/RT/Scrip_Overlay.pm:357]
[/export/rt3/lib/RT/Scrips_Overlay.pm:196]
[/export/rt3/lib/RT/Transaction_Overlay.pm:118]
[/export/rt3/lib/RT/Ticket_Overlay.pm:3815]
[/export/rt3/lib/RT/Ticket_Overlay.pm:629]
[/export/rt3/lib/RT/Interface/Web.pm:348]
[/export/rt3/local/html/Ticket/Display.html:73]
[/export/rt3/local/html/Ticket/Create.html:291]
[/export/rt3/share/html/autohandler:196]
(/export/rt3/lib/RT/Scrip_Overlay.pm:383)

  • Dirk Pape:

This is not reproducible!
Scrip 20 works well most times.
Other Scrips (with different templates) are failing, too.

This happens about once or twice a day.

For debugging such problems, I usually instruct the MTA to keep a copy
of the mail that is passed to RT. Using timestamps, I correlate
strange errors to the complete messages that trigger them.

Or can’t you reproduce the error if you pipe the very same message
into RT again?

Current mail filters: many dial-up/DSL/cable modem hosts, and the
following domains: bigpond.com, di-ve.com, hotmail.com, jumpy.it,
libero.it, netscape.net, postino.it, simplesnet.pt, spymac.com,
tatanova.com, tiscali.co.uk, tiscali.cz, tiscali.it, voila.fr, yahoo.com.

I’ve actually seen this error intermittently with RT under FastCGI
dating back to 3.0.8 or even earlier. There’s something related to
tempfiles that’s being tainted. Because it’s intermittent (and usually
handles on a second, third or later request, but not on a first request
ot a given process, I haven’t been able to track it down. I’m pretty
sure, but not positive, that it’s related to a module outside RT.
Sometimes it’s in MIME::Entity. Sometimes in Text::Template.

One way to cope is to run RT with SuExec in apache, rather than a setgid
mason_handler.fcgi.On Sat, May 22, 2004 at 10:30:32PM +0200, Dirk Pape wrote:

Hello Jesse,

I just tested again with rt 3.0.11rc3 (fastcgi setup, perl 5.8.3) and
found following error in the log. Scrip 20 is our “AutoReply to Requestors”
scrip which I dont like to die.

This is not reproducible!
Scrip 20 works well most times.
Other Scrips (with different templates) are failing, too.

This happens about once or twice a day.

Dirk.

[Sat May 22 19:51:20 2004] [error]: Scrip 20 died. - Insecure dependency in
eval while
running with -T switch at
/export/perl-5.8.3/lib/site_perl/5.8.3/Text/Template.pm line
319.

Stack:
[/export/perl-5.8.3/lib/site_perl/5.8.3/Text/Template.pm:319]
[/export/rt3/lib/RT/Template_Overlay.pm:384]
[/export/rt3/lib/RT/Template_Overlay.pm:315]
[/export/rt3/lib/RT/Action/SendEmail.pm:210]
[/export/rt3/lib/RT/ScripAction_Overlay.pm:199]
[/export/rt3/lib/RT/Scrip_Overlay.pm:414]
[/export/rt3/lib/RT/Scrip_Overlay.pm:357]
[/export/rt3/lib/RT/Scrips_Overlay.pm:196]
[/export/rt3/lib/RT/Transaction_Overlay.pm:118]
[/export/rt3/lib/RT/Ticket_Overlay.pm:3815]
[/export/rt3/lib/RT/Ticket_Overlay.pm:629]
[/export/rt3/lib/RT/Interface/Web.pm:348]
[/export/rt3/local/html/Ticket/Display.html:73]
[/export/rt3/local/html/Ticket/Create.html:291]
[/export/rt3/share/html/autohandler:196]
(/export/rt3/lib/RT/Scrip_Overlay.pm:383)


Rt-devel mailing list
Rt-devel@lists.bestpractical.com
The rt-devel Archives

Hello Jesse,

–Am Samstag, 22. Mai 2004 23:46 Uhr -0400 schrieb Jesse Vincent
jesse@bestpractical.com:

I’ve actually seen this error intermittently with RT under FastCGI
dating back to 3.0.8 or even earlier. There’s something related to
tempfiles that’s being tainted. Because it’s intermittent (and usually
handles on a second, third or later request, but not on a first request
ot a given process, I haven’t been able to track it down. I’m pretty
sure, but not positive, that it’s related to a module outside RT.
Sometimes it’s in MIME::Entity. Sometimes in Text::Template.

One way to cope is to run RT with SuExec in apache, rather than a setgid
mason_handler.fcgi.

I still see this error in both MIME::Entity and Text::Template with 3.0.11
final.
RT definetly fails to send mail, if a scrip dies in Text::Template so this
is severe!
How can I help you to debug the issue?

Dirk.

I still see this error in both MIME::Entity and Text::Template with 3.0.11
final.

nod And there was just a note to rt-users that it was happening in
3.0.10 as well. The thing I need to be able to debug this is a way to
reproduce it 100% of the time. With that, I should be able to turnaround
a fix pretty quickly.