[Mimedefang] Embedded Perl multiplexor on Debian - sarge Error

David F. Skoll dfs at roaringpenguin.com
Wed Jul 19 19:48:57 EDT 2006


Kayne Kruse wrote:

> I just noticed this error, and was curious as to what in the filter is
> the FD.
> Jul 19 17:03:02 mailfilter mimedefang-multiplexor[4711]: WARNING:
> Something in your Perl filter appears to have opened a file descriptor
> outside of any function.  [...]

> lr-x------ 1 root root 64 Jul 19 17:19  7 -> /usr/share/perl5/File/Scan.pm

> Now You see I think its Mimedefangs own open File::Scan causing this
> warning.  Whats the fix for the annoyance?

Remove File::Scan from your system.  It's buggy and evil.

The open descriptor results from the dubious practice of using
SelfLoader to load functions only on demand.  SelfLoader keeps a file
descriptor open.  File::Scan uses this to load its file patterns as
Perl routines.

Did I mention that File::Scan was evil?  Read the code sometime.
Here's a snippet:

		if($type == 1) {
		} elsif($type == 2) {
			if($subtype == 1) {
				if($total==10240) {
					/\x48\x45\x4c\x4f\x44\x1d\x4d\x41\x49\xec\xc8\x1e\x52\xbc\x6e\x5d\xc3\x43\x50\x54/s and $virus = "W32/Zafi.d\@MM", last LINE;
				}
				if($total==1024) {
					/\x0f\x4d\x61\x70\x56\x5f\xc5\x77\x4f\x66\x18\x10\x1e\x55\x6e\x56\x6d\x11\x90\x2f\x62\x08\x72\x73\xb3\x30\x0c\x99\x45\x6e\x76\x22\x6f\xdf\x52\xfc\x7b\x3c\x56\x61\xfb\xe6\x62\xac\x19\x67\x44\x1a\x76\xb1\x54\x79\x70\x4c\x0f\x53\xf5\xbf\x6c\x8e\x6d\x54\x69\x79/s and $virus = "W32/Mydoom.bb\@MM", last LINE;
				}
			} elsif($subtype == 2) {
				if($total==4096) {


... and so on.

Regards,

David.



More information about the MIMEDefang mailing list