msva-perl chokes when some environment variables are set
If you have certain environment variables set, msva-perl refuses to launch its subprocess. For example:
0 dkg@pip:~$ ENV=~/.shrc msva-perl bash Insecure $ENV{ENV} while running with -T switch at /usr/bin/msva-perl line 476. 29 dkg@pip:~$
this is due to the implicit taint mode checking.
Rather than filtering the environment or entirely disabling taint mode, i think msva-perl should treat the supervised subprocess differently than it treats data coming in over the network. For example, maybe we should deliberately untaint every environment variable in the subprocess after the fork() but before the exec().
(from redmine: created on 2010-07-19, closed on 2010-10-08)