develooper Front page | perl.perl5.changes | Postings from March 2019

[perl.git] branch blead updated. v5.29.8-61-gb5e20476d6

From:
Karl Williamson
Date:
March 8, 2019 20:14
Subject:
[perl.git] branch blead updated. v5.29.8-61-gb5e20476d6
Message ID:
E1h2LtL-0005st-HL@git.dc.perl.space
In perl.git, the branch blead has been updated

<https://perl5.git.perl.org/perl.git/commitdiff/b5e20476d6a84607af87913aedb9cb65724747e6?hp=fd879d933c2a2ee22ac6e2462acc016aa033854d>

- Log -----------------------------------------------------------------
commit b5e20476d6a84607af87913aedb9cb65724747e6
Author: Karl Williamson <khw@cpan.org>
Date:   Sun Jul 1 22:39:47 2018 -0600

    perldelta for fd879d933c2a2ee22ac6e2462acc016aa033854d
    
    This patch causes pack to die rather than return malformed UTF-8.  This
    protects the rest of the core from unexpectedly getting malformed
    inputs.

-----------------------------------------------------------------------

Summary of changes:
 pod/perldelta.pod | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/pod/perldelta.pod b/pod/perldelta.pod
index 8b471a3dd6..b70159851e 100644
--- a/pod/perldelta.pod
+++ b/pod/perldelta.pod
@@ -63,6 +63,12 @@ XXX For a release on a stable branch, this section aspires to be:
 
 [ List each incompatible change as a =head2 entry ]
 
+=head2 C<pack()> no longer can return malformed UTF-8
+
+It croaks if it would otherwise return a UTF-8 string that contains
+malformed UTF-8.  This protects agains potential security threats.  This
+is considered a bug fix as well ([perl #131642]).
+
 =head1 Deprecations
 
 XXX Any deprecated features, syntax, modules etc. should be listed here.
@@ -398,7 +404,9 @@ files in F<ext/> and F<lib/> are best summarized in L</Modules and Pragmata>.
 
 =item *
 
-XXX
+C<pack()> no longer can return malformed UTF-8.  It croaks if it would
+otherwise return a UTF-8 string that contains malformed UTF-8.  This
+protects agains potential security threats.  [perl #131642]
 
 =back
 

-- 
Perl5 Master Repository



nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About