- Notifications
You must be signed in to change notification settings - Fork4.9k
Commit60028fd
committed
Abandon the use of Perl's Safe.pm to enforce restrictions in plperl, as it is
fundamentally insecure. Instead apply an opmask to the whole interpreter thatimposes restrictions on unsafe operations. These restrictions are much harderto subvert than is Safe.pm, since there is no container to be broken out of.Backported to release 7.4.In releases 7.4, 8.0 and 8.1 this also includes the necessary backporting ofthe two interpreters model for plperl and plperlu adopted in release 8.2.In versions 8.0 and up, the use of Perl's POSIX module to undo its localemangling on Windows has become insecure with these changes, so it isreplaced by our own routine, which is also faster.Nice side effects of the changes include that it is now possible to use perl's"strict" pragma in a natural way in plperl, and that perl's $a and$b variables now work as expected in sort routines, and that functioncompilation is significantly faster.Tim Bunce and Andrew Dunstan, with reviews from Alex Hunsaker andAlexey Klyukin.Security:CVE-2010-11691 parente274064 commit60028fd
File tree
4 files changed
+493
-78
lines changed- doc/src/sgml
- src/pl/plperl
4 files changed
+493
-78
lines changedLines changed: 21 additions & 2 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 |
| - | |
| 2 | + | |
3 | 3 |
| |
4 | 4 |
| |
5 | 5 |
| |
| |||
259 | 259 |
| |
260 | 260 |
| |
261 | 261 |
| |
262 |
| - | |
| 262 | + | |
| 263 | + | |
| 264 | + | |
| 265 | + | |
| 266 | + | |
| 267 | + | |
| 268 | + | |
| 269 | + | |
| 270 | + | |
| 271 | + | |
| 272 | + | |
| 273 | + | |
| 274 | + | |
| 275 | + | |
| 276 | + | |
| 277 | + | |
| 278 | + | |
| 279 | + | |
| 280 | + | |
| 281 | + | |
263 | 282 |
| |
264 | 283 |
| |
265 | 284 |
| |
|
Lines changed: 10 additions & 3 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 |
| - | |
| 2 | + | |
3 | 3 |
| |
4 | 4 |
| |
5 | 5 |
| |
| |||
18 | 18 |
| |
19 | 19 |
| |
20 | 20 |
| |
21 |
| - | |
| 21 | + | |
22 | 22 |
| |
23 | 23 |
| |
24 | 24 |
| |
| |||
33 | 33 |
| |
34 | 34 |
| |
35 | 35 |
| |
| 36 | + | |
| 37 | + | |
| 38 | + | |
| 39 | + | |
| 40 | + | |
| 41 | + | |
| 42 | + | |
36 | 43 |
| |
37 | 44 |
| |
38 | 45 |
| |
| |||
52 | 59 |
| |
53 | 60 |
| |
54 | 61 |
| |
55 |
| - | |
| 62 | + | |
56 | 63 |
| |
57 | 64 |
| |
58 | 65 |
| |
|
0 commit comments
Comments
(0)