Mythweb broken since perl upgrade (. not in path anymore)

[stse@…]

Hi!

One of the last Perl updates in Debian removes the "." from the module search path in response to CVE-2016-1238.

The result is that mythweb.pl doesn't find its modules because /usr/share/mythtv/mythweb isn't in the perl search path. It seems to depend that "." was in the path.

Here are the apache error logs: [Wed Oct 05 15:37:27.302237 2016] [cgi:error] [pid 31732] [client 84.165.138.227:60430] AH01215: Can't locate modules/stream/handler.pl in @INC (@INC contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.24.1 /usr/local/share/perl/5.24.1 /usr/lib/x86_64-linux-gnu/perl5/5.24 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.24 /usr/share/perl/5.24 /usr/local/lib/site_perl /usr/lib/x86_64-linux-gnu/perl-base) at /usr/share/mythtv/mythweb/mythweb.pl line 67.: /usr/share/mythtv/mythweb/mythweb.pl, referer: ​http://osgiliath.gondor/mythweb/tv/recorded [Wed Oct 05 15:37:27.302757 2016] [cgi:error] [pid 31732] [client 84.165.138.227:60430] End of script output before headers: mythweb.pl, referer: ​http://osgiliath.gondor/mythweb/tv/recorded

Many greetings,

Stephan

By the way, your stupid bug tracker doesn't allow mail addresses with a "+". According to the RFC an address like a~`*&^{$_-={}'?b@<domain> is a legal one.}

[stuartm]

Reassigning to the correct component.

(​https://www.mythtv.org/wiki/WebFrontend)

[lsorense@…]

Adding this solves the problem for me:

# Add mythweb dir to @INC

use lib dirname(abs_path($ENV{'SCRIPT_FILENAME'} or $0));

I added it near the top of mythweb.pl

[stse@…]

Replying to lsorense@…:

Adding this solves the problem for me:

# Add mythweb dir to @INC

use lib dirname(abs_path($ENV{'SCRIPT_FILENAME'} or $0));

I added it near the top of mythweb.pl

Yes, this works for me as well. Thanks for the quick fix!

Greetings,

Stephan

[Stuart Auchterlonie <stuarta@…>]

In e902c9788b1d405b0facfabd5b80ca49aaa83add/mythweb:

Add mythweb dir to @INC.

Fixes #12895

Signed-off-by: Peter Bennett <pbennett@…>

[Stuart Auchterlonie <stuarta@…>]

In 3fa642f00da9529674ea93110396d036da1d43ff/mythweb:

Add mythweb dir to @INC.

Fixes #12895

Signed-off-by: Peter Bennett <pbennett@…>
(cherry picked from commit e902c9788b1d405b0facfabd5b80ca49aaa83add)