develooper Front page | perl.perl5.porters | Postings from August 2017

Shouldn't we be fixing our function interfaces to removeinappropriate I32 U32?

Thread Next
From:
Karl Williamson
Date:
August 10, 2017 22:49
Subject:
Shouldn't we be fixing our function interfaces to removeinappropriate I32 U32?
Message ID:
e7971e33-a73b-3f4a-0239-13b3ed9e6eab@khwilliamson.com
I'm thinking we should go through embed.fnc looking for these parameter 
types that are specifying lengths, and change them, even if these are in 
the public API.  Aren't these are segfaults and DOS attacks waiting to 
happen?

Zefram said we did something similar a while back with array indices.

I'm unsure of the implications for modules that can work on earlier perls.
Thread Next

nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About