Hi!

This was found on a stable system, but the code has the same issue on
unstable (spamassassin 3.3.1-1), the line there is 232.

The function _run_hashcash_for_one_string uses an uninitialized value
in the dbg call. Here's the message:

  spamd: Use of uninitialized value $ver in concatenation (.) or string
  at /usr/share/perl5/Mail/SpamAssassin/Plugin/Hashcash.pm line 221.

So it seems $var would need to be assigned before the if.

regards,
guillem