develooper Front page | perl.perl5.porters | Postings from September 2016

[perl #128988] heap-use-after-free Perl_yyerror_pvn (toke.c:11015)

From:
Tony Cook via RT
Date:
September 7, 2016 00:50
Subject:
[perl #128988] heap-use-after-free Perl_yyerror_pvn (toke.c:11015)
Message ID:
rt-4.0.24-9589-1473209406-558.128988-15-0@perl.org
On Sun Aug 21 21:11:02 2016, brian.carpenter@gmail.com wrote:
> lgtm

Applied as 382450a68fa9cdd5206e8c46383bd92e63aeb392.

On Thu Aug 25 08:46:42 2016, davem wrote:
> > I don't think this is a security issue.
> >
> > It requires feeding code to perl, at which point an attacker has
> > control
> > anyway.
> 
> Agreed.

Making the ticket public.

Tony

---
via perlbug:  queue: perl5 status: open
https://rt.perl.org/Ticket/Display.html?id=128988



nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About