RECENT POSTS
- Introduction to FreeBSD Security Best Practices
- Working with Package Management in FreeBSD
- Understanding FreeBSD Security Advisories and Updates
- Troubleshooting Common System Administration Issues in FreeBSD
- Tips for Hardening FreeBSD to achieve System Protection
- Setting Up DHCP Server in FreeBSD
- Secure User and Group Management in FreeBSD Systems
- Secure Remote Access with SSH in FreeBSD
- Optimizing System Performance in FreeBSD
- Network Packet Capture with tcpdump in FreeBSD
- All posts ...
Do you have GDPR compliance issues ?
Check out Legiscope a GDPR compliance software, that will save you weeks of work, automating your documentation, the training of your teams and all processes you need to keep your organisation compliant with privacy regulations
P5-lexical-sealrequirehints
Jul 20, 2023
Perl module to prevent leakage of lexical hints
Perl module to prevent leakage of lexical hints
LexicalSealRequireHints works around two historical bugs in Perl’s handling of the ^H lexical hints variable. One bug causes lexical state in one file to leak into another that is required/used from it. This bug, [perl #68590], was present from Perl 5.6 up to Perl 5.10, fixed in Perl 5.11.0. The second bug causes lexical state normally a blank ^H once the first bug is fixed to leak outwards from utf8.pm, if it is automatically loaded during Unicode regular expression matching, into whatever source is compiling at the time of the regexp match. This bug, [perl #73174], was present from Perl 5.8.7 up to Perl 5.11.5, fixed in Perl 5.12.0.
Both of these bugs seriously damage the usability of any module relying on ^H for lexical scoping, on the affected Perl versions. It is in practice essential to work around these bugs when using such modules. On versions of Perl that require such a workaround, this module globally changes the behaviour of require, including use and the implicit require performed in Unicode regular expression matching, so that it no longer exhibits these bugs.
Checkout these related ports:
- Zziplib - Library to provide transparent read access to zipped files
- Zydis - Fast and lightweight x86/x86-64 disassembler library
- Zycore-c - Support library with platform independent types, macros, etc for Zydis
- Zthread - Platform-independent object-oriented C++ threading library
- Zookeeper - Coordination Service for Distributed Applications
- Zls - Zig LSP implementation + Zig Language Server
- Zfp - High throughput library for compressed floating-point arrays
- Zeal - Offline documentation browser
- Zapcc - C++ caching compiler based on clang
- Zanata-platform - Web-based translation platform
- Zanata-cli - Zanata Java command line client
- Z88dk - Complete Z80/Z180 development kit
- Z80ex - ZiLOG Z80 CPU emulator library
- Z80asm - Assembler for the Z80 microprocessor
- Z80-asm - Z80 assembly code assembler and disassembler