https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7630

            Bug ID: 7630
           Summary: Warnings in regression tests because of insecure $PATH
           Product: Spamassassin
           Version: SVN Trunk (Latest Devel Version)
          Hardware: PC
                OS: OpenBSD
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Regression Tests
          Assignee: [email protected]
          Reporter: [email protected]
  Target Milestone: Undefined

Created attachment 5599
  --> https://bz.apache.org/SpamAssassin/attachment.cgi?id=5599&action=edit
Regression test fix

When running a test I have some warnings about insecure $ENV{PATH}.
-------------------------------------------------------------------
$ prove -t t/uri.t  
t/uri.t .. Insecure $ENV{PATH} while running with -t switch at SATest.pm line
177.
Insecure directory in $ENV{PATH} while running with -t switch at SATest.pm line
177.
Insecure dependency in system while running with -t switch at SATest.pm line
177.
t/uri.t .. ok     
All tests successful.
Files=1, Tests=95,  5 wallclock secs ( 0.11 usr  0.01 sys +  3.82 cusr  0.48
csys =  4.42 CPU)
Result: PASS
-------------------------------------------------------------------

Resetting $PATH to a default one and untainting a variable before the system(3)
call fixes the issue.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to