Item7247: BulkRegistration causes Insecure dependency error

BulkRegistration

TWiki detected an internal error - please check your TWiki logs and webserver logs for more information.

Insecure dependency in open while running with -T switch

When investigating I found that it's the perl -T switch in the bin/manage script that causes this BulkRegistration to fail. When removing -T it works, but this cannot be the permanent solution for security reasons.

Diagnostics Log printout:

[Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] DESCRIPTION OF DIAGNOSTICS, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] These messages are classified as follows (listed in increasing order of, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] desperation):, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (W) A warning (optional)., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (D) A deprecation (enabled by default)., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (S) A severe warning (enabled by default)., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (F) A fatal error (trappable)., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (P) An internal error you should never see (trappable)., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (X) A very fatal error (nontrappable)., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (A) An alien error message (not generated by Perl)., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] The majority of messages from the first three classifications above, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (W, D & S) can be controlled using the warnings pragma., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] If a message can be controlled by the warnings pragma, its warning, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] category is included with the classification letter in the description, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] below., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] Severe warnings are always enabled, unless they are explicitly disabled, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] with the warnings pragma or the -X switch., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] Trappable errors may be trapped using the eval operator. See, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] "eval" in perlfunc. In almost all cases, warnings may be selectively, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] disabled or promoted to fatal errors using the warnings pragma., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] See warnings., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] defined(%hash) is deprecated at, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] \t/var/www/twiki/lib/CPAN/lib//Locale/Maketext/Lexicon.pm line 286 (#1), referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (D deprecated) defined() is not usually useful on hashes because it, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] checks for an undefined scalar value. If you want to see if the hash, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] is empty, just use if (%hash) { # not empty } for example., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] [Mon Apr 29 09:21:06 2013] manage: defined(%hash) is deprecated at /var/www/twiki/lib/CPAN/lib//Locale/Maketext/Lexicon.pm line 286., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] \t(Maybe you should just omit the defined()?), referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] [Mon Apr 29 09:21:06 2013] manage: \t(Maybe you should just omit the defined()?), referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] Use of uninitialized value $tag in lc at /var/www/twiki/lib/TWiki/I18N.pm line, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] \t64 (#2), referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (W uninitialized) An undefined value was used as if it were already, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] defined. It was interpreted as a "" or a 0, but maybe it was a mistake., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] To suppress this warning assign a defined value to your variables., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] To help you figure out what was undefined, perl will try to tell you the, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] name of the variable (if any) that was undefined. In some cases it cannot, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] do this, so it also tells you what operation you used the undefined value, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] in. Note, however, that perl optimizes your program and the operation, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] displayed in the warning may not necessarily appear literally in your, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] program. For example, "that $foo" is usually optimized into "that ", referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] . $foo, and the warning will refer to the concatenation (.) operator,, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] even though there is no . in your program., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] [Mon Apr 29 09:21:06 2013] manage: Use of uninitialized value $tag in lc at /var/www/twiki/lib/TWiki/I18N.pm line 64., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] Insecure dependency in open while running with -T switch at /var/www/twiki/lib/TWiki/Store/RcsFile.pm line 793., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7=

This issue was first reported in SID-01689.

-- TWiki:Main/HasseHaljeskog - 2013-04-30

Thank you Hasse for reporting, needs to be fixed. Originally at TWiki:Support.SID-01689.

-- TWiki:Main.PeterThoeny - 2013-04-30