Package: perl-modules
Version: 5.8.8-4
Severity: normal

I am hesitating whether this is important, normal or wishlist bug; probably all 
of them.

CGI.pm uses a temp dir for uploads. It does not make it possible to force it
(apart from changing the source), or set it explicitely, but uses a heuristics
to walk several hardwired dirs and use the first which is writable.

This actually breaks programs which preload CGI when apache2 starts (runs at 
uid 0 because
there is no user [suexec] at that time, so everything is writable), and later 
find
out that suexec'ed uid cannot write the dir, an CGI.pm fails with a cryptic 
error msg. 

Heuristics is a good thing, but there should be a way to override it without
changing the source, like other options allow.


And it was a _bitch_ to find this bug, since the error message is crap. I would
say this would be a nicer way to do it:

--- CGI.pm.orig 2006-05-17 16:28:28.406571126 +0200
+++ CGI.pm      2006-05-17 21:41:00.280888182 +0200
@@ -3355,7 +3355,7 @@
            last if defined($filehandle = 
Fh->new($filename,$tmp,$PRIVATE_TEMPFILES));
             $seqno += int rand(100);
           }
-          die "CGI open of tmpfile: $!\n" unless defined $filehandle;
+          die "CGI.pm open of tmpfile ($tmp/$filename): $!\n" unless defined 
$filehandle;
          $CGI::DefaultClass->binmode($filehandle) if $CGI::needs_binmode 
                      && defined fileno($filehandle);
 

(If you don't want to share $tmp/$filename, at least use "CGI.pm" instead of 
"CGI", and
maybe tell $tmp at least, so people can tell WHICH part of some hundred 
included modules
spew the error and why.)


-- System Information:
Debian Release: testing/unstable
Architecture: i386 (i686)
Kernel: Linux 2.6.13-k7-yikes
Locale: LANG=C, LC_CTYPE=hu_HU (charmap=ISO-8859-2)

Versions of packages perl-modules depends on:
ii  perl                          5.8.8-4    Larry Wall's Practical Extraction 

perl-modules recommends no packages.

-- debconf-show failed


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to