develooper Front page | perl.perl5.porters | Postings from June 2019

Re: [perl #134169] 5.30.0 - Unable to set supplementary group IDs

Thread Previous
From:
Karl Williamson
Date:
June 3, 2019 21:40
Subject:
Re: [perl #134169] 5.30.0 - Unable to set supplementary group IDs
Message ID:
a23893e6-1c5c-9fcb-ba18-e8b986d92549@khwilliamson.com
On 6/3/19 2:46 PM, James E Keenan via RT wrote:
> On Mon, 03 Jun 2019 12:52:50 GMT, manuel-perl@mausz.at wrote:
>> This is a bug report for perl from manuel-perl@mausz.at,
>> generated with the help of perlbug 1.41 running under perl 5.30.0.
>>
>>
>> -----------------------------------------------------------------
>> [Please describe your issue here]
>>
>> In perl 5.30 it's impossible to set supplementary group IDs as the group
>> id parsing fails.
>>
>> This is due to the fact that Perl_grok_atoUV has been changed so endptr
>> constraints the input. In the current code the endptr simply does not
>> get reset.
>>
>> As this might leave processes with extended privileges I've marked this
>> as critical.
>>
>> See https://github.com/Perl/perl5/pull/21
>>
> 
> Could you provide a brief example of how, previously, you would have expected to be able to set these supplementary grou IDs?
> 
> Thank you very much.
> 

Could you submit a patch against blead?  We also need a test.

The github repository is only a mirror, and is supposed to not be able 
to accept pull requests, but that can't be turned off, unfortunately.

Thread Previous


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About