develooper Front page | perl.perl5.porters | Postings from October 2002

Re: [perl #17744] Security-Hole in module Safe.pm

Thread Previous | Thread Next
From:
Benjamin Goldberg
Date:
October 4, 2002 10:18
Subject:
Re: [perl #17744] Security-Hole in module Safe.pm
Message ID:
3D9DCE86.BB2CE935@earthlink.net
Andreas Jurenda (via RT) wrote:
[snip]
>     my $temp_mask = $obj->{Mask};
>     # JURENDA: put opmask in temporary scalar
>     return Opcode::_safe_call_sv($root, $temp_mask, $evalsub);
>     # JURENDA: call with this temp var

Personally, I would prefer that we should prevent user code from even
*trying* to alter these...

    return Opcode::_safe_call_sv("$root", "$obj->{Mask}", $evalsub);

This way, trying to change $_[1] in the evaled sub produces death due to
modification of read-only scalar.


-- 
How many Monks would a Chipmonk chip,
if a Chipmonk could chip Monks?

Thread Previous | Thread Next


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About