r/perl • • 12h ago

Perl and CVEs - another source to scan

4 Upvotes

I stumbled across that writeup: https://www.reddit.com/r/perl/comments/1wsc3gw/i_found_two_more_segfaults_in_dbi_same_bug_class/

and checked the pperl DBI. It does not have the CVEs mentioned by construction (pure Perl + FFI), but the review found one more bug in upstream DBI which is still present in newest 1.655. I commented.

Someone might also want to scan https://perl.petamem.com/docs/eng/changelog/index.html for the words "crash" or similar, because the development paradigm of pperl is "faithful to perl5 or better". Where "or better" means to not intentionally emulate crashes.

https://perl.petamem.com/docs/eng/changelog/0.6.23.html -> Tie::Hash::Indexed
https://perl.petamem.com/docs/eng/changelog/0.6.21.html -> LMDB_File etc.

This post is certified human-created, so you do not get a rash. ;-)


r/perl • • 10h ago

Perl-Magpie.org (CPAN Tester site that works)

Thumbnail matrix.perl-magpie.org
5 Upvotes