SID-01689: BulkRegistration causes Insecure dependency error

Status:	Answered	TWiki version:	5.1.4	Perl version:	5.014002
Category:	CategoryRegistration	Server OS:	Ubuntu 12.10	Last update:	12 years ago

When I try to make a BulkRegistration I get an error:

TWiki detected an internal error - please check your TWiki logs and webserver logs for more information.

Insecure dependency in open while running with -T switch

When investigating I found that it's the perl -T switch in the bin/manage script that causes this BulkRegistration to fail. When removing -T it works, but I cannot have this as a permanent solution for security reasons.

Please advice on how to solve this issue.

Twiki version: TWiki-5.1.4, Sat, 16 Feb 2013, build 25114, Plugin API version 1.4

-- Hasse Haljeskog - 2013-04-26

Discussion and Answer

I added use Diagnostics to bin/manage and got the following output:

=[Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] DESCRIPTION OF DIAGNOSTICS, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] These messages are classified as follows (listed in increasing order of, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] desperation):, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (W) A warning (optional)., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (D) A deprecation (enabled by default)., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (S) A severe warning (enabled by default)., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (F) A fatal error (trappable)., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (P) An internal error you should never see (trappable)., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (X) A very fatal error (nontrappable)., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (A) An alien error message (not generated by Perl)., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] The majority of messages from the first three classifications above, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (W, D & S) can be controlled using the warnings pragma., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] If a message can be controlled by the warnings pragma, its warning, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] category is included with the classification letter in the description, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] below., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] Severe warnings are always enabled, unless they are explicitly disabled, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] with the warnings pragma or the -X switch., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] Trappable errors may be trapped using the eval operator. See, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] "eval" in perlfunc. In almost all cases, warnings may be selectively, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] disabled or promoted to fatal errors using the warnings pragma., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] See warnings., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] defined(%hash) is deprecated at, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] \t/var/www/twiki/lib/CPAN/lib//Locale/Maketext/Lexicon.pm line 286 (#1), referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (D deprecated) defined() is not usually useful on hashes because it, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] checks for an undefined scalar value. If you want to see if the hash, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] is empty, just use if (%hash) { # not empty } for example., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] [Mon Apr 29 09:21:06 2013] manage: defined(%hash) is deprecated at /var/www/twiki/lib/CPAN/lib//Locale/Maketext/Lexicon.pm line 286., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] \t(Maybe you should just omit the defined()?), referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] [Mon Apr 29 09:21:06 2013] manage: \t(Maybe you should just omit the defined()?), referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] Use of uninitialized value $tag in lc at /var/www/twiki/lib/TWiki/I18N.pm line, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] \t64 (#2), referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] (W uninitialized) An undefined value was used as if it were already, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] defined. It was interpreted as a "" or a 0, but maybe it was a mistake., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] To suppress this warning assign a defined value to your variables., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] To help you figure out what was undefined, perl will try to tell you the, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] name of the variable (if any) that was undefined. In some cases it cannot, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] do this, so it also tells you what operation you used the undefined value, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] in. Note, however, that perl optimizes your program and the operation, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] displayed in the warning may not necessarily appear literally in your, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] program. For example, "that $foo" is usually optimized into "that ", referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] . $foo, and the warning will refer to the concatenation (.) operator,, referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] even though there is no . in your program., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] , referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] [Mon Apr 29 09:21:06 2013] manage: Use of uninitialized value $tag in lc at /var/www/twiki/lib/TWiki/I18N.pm line 64., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7 [Mon Apr 29 09:21:06 2013] [error] [client 127.0.0.1] Insecure dependency in open while running with -T switch at /var/www/twiki/lib/TWiki/Store/RcsFile.pm line 793., referer: http://127.0.1.1/twiki/bin/login/Main/UnprocessedRegistrations?twiki_redirect_cache=e82e23d40ed0f1f871f90d1165fc39f7=

Please give me your advice.

-- Hasse Haljeskog - 2013-04-29

Thanks Hasse for reporting. This is a bug that needs to be fixed. Could you please file one at TWikibug:WebHome?

-- Peter Thoeny - 2013-04-29

Thanks Peter, Bug filed at: http://develop.twiki.org/~twiki4/cgi-bin/view/Bugs/Item7247

-- Hasse Haljeskog - 2013-04-30

Thank you Hasse!

-- Peter Thoeny - 2013-04-30

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.