Opened 7 years ago

Closed 7 years ago

Last modified 7 years ago

#12895 closed Bug Report - General (fixed)

Mythweb broken since perl upgrade (. not in path anymore)

Reported by: stse@… Owned by: Stuart Auchterlonie
Priority: major Milestone: unknown
Component: Plugin - MythWeb Version: 0.28.0
Severity: medium Keywords:
Cc: Ticket locked: no

Description

Hi!

One of the last Perl updates in Debian removes the "." from the module search path in response to CVE-2016-1238.

The result is that mythweb.pl doesn't find its modules because /usr/share/mythtv/mythweb isn't in the perl search path. It seems to depend that "." was in the path.

Here are the apache error logs: [Wed Oct 05 15:37:27.302237 2016] [cgi:error] [pid 31732] [client 84.165.138.227:60430] AH01215: Can't locate modules/stream/handler.pl in @INC (@INC contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.24.1 /usr/local/share/perl/5.24.1 /usr/lib/x86_64-linux-gnu/perl5/5.24 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.24 /usr/share/perl/5.24 /usr/local/lib/site_perl /usr/lib/x86_64-linux-gnu/perl-base) at /usr/share/mythtv/mythweb/mythweb.pl line 67.: /usr/share/mythtv/mythweb/mythweb.pl, referer: http://osgiliath.gondor/mythweb/tv/recorded [Wed Oct 05 15:37:27.302757 2016] [cgi:error] [pid 31732] [client 84.165.138.227:60430] End of script output before headers: mythweb.pl, referer: http://osgiliath.gondor/mythweb/tv/recorded

Many greetings,

Stephan

By the way, your stupid bug tracker doesn't allow mail addresses with a "+". According to the RFC an address like a~`*&$_-={}'?b@<domain> is a legal one.

Change History (5)

comment:1 Changed 7 years ago by stuartm

Component: MythTV - Web FrontendPlugin - MythWeb
Owner: changed from stuartm to Stuart Auchterlonie

Reassigning to the correct component.

(https://www.mythtv.org/wiki/WebFrontend)

comment:2 Changed 7 years ago by lsorense@…

Adding this solves the problem for me:

# Add mythweb dir to @INC

use lib dirname(abs_path($ENV{'SCRIPT_FILENAME'} or $0));

I added it near the top of mythweb.pl

comment:3 in reply to:  2 Changed 7 years ago by stse@…

Replying to lsorense@…:

Adding this solves the problem for me:

# Add mythweb dir to @INC

use lib dirname(abs_path($ENV{'SCRIPT_FILENAME'} or $0));

I added it near the top of mythweb.pl

Yes, this works for me as well. Thanks for the quick fix!

Greetings,

Stephan

comment:4 Changed 7 years ago by Stuart Auchterlonie <stuarta@…>

Resolution: fixed
Status: newclosed

In e902c9788b1d405b0facfabd5b80ca49aaa83add/mythweb:

Add mythweb dir to @INC.

Fixes #12895

Signed-off-by: Peter Bennett <pbennett@…>

comment:5 Changed 7 years ago by Stuart Auchterlonie <stuarta@…>

In 3fa642f00da9529674ea93110396d036da1d43ff/mythweb:

Add mythweb dir to @INC.

Fixes #12895

Signed-off-by: Peter Bennett <pbennett@…>
(cherry picked from commit e902c9788b1d405b0facfabd5b80ca49aaa83add)

Note: See TracTickets for help on using tickets.