Skip to content
This repository was archived by the owner on Jun 1, 2023. It is now read-only.

Commit b495bce

Browse files
rurbanrurban
committed
Add perl5282cdelta.pod
and update perlcdelta.pod for 5.26.5c
1 parent e0f0e26 commit b495bce

File tree

6 files changed

+206
-97
lines changed

6 files changed

+206
-97
lines changed

‎MANIFEST‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5207,6 +5207,7 @@ pod/perl5280cdelta.pod cperl changes in version 5.28.0c
52075207
pod/perl5280delta.pod Perl changes in version 5.28.0
52085208
pod/perl5281cdelta.pod cperl changes in version 5.28.1c
52095209
pod/perl5281delta.pod Perl changes in version 5.28.1
5210+
pod/perl5282cdelta.pod cperl changes in version 5.28.2c
52105211
pod/perl5290cdelta.pod cperl changes in version 5.29.0c
52115212
pod/perl5290delta.pod Perl changes in version 5.29.0
52125213
pod/perl5291delta.pod Perl changes in version 5.29.1
@@ -5230,7 +5231,7 @@ pod/perlbook.pod Perl book information
52305231
pod/perlboot.pod
52315232
pod/perlbot.pod
52325233
pod/perlcall.pod Perl calling conventions from C
5233-
pod/perlcdelta.pod cperl changes in version 5.26.4c
5234+
pod/perlcdelta.pod cperl changes in version 5.26.5c
52345235
pod/perlcheat.pod Perl cheat sheet
52355236
pod/perlclib.pod Internal replacements for standard C library functions
52365237
pod/perlcommunity.pod Perl community information

‎pod/perl.pod‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -244,8 +244,9 @@ aux c2ph h2ph h2xs cperlbug pl2pm pod2html pod2man splain xsubpp
244244
perlexperiment A listing of experimental features in Perl
245245

246246
perlcperl Perl notes for cperl (variant)
247-
perlcdelta cperl changes in version 5.26.4c
247+
perlcdelta cperl changes in version 5.26.5c
248248
perl5290cdelta cperl changes in version 5.29.0c
249+
perl5282cdelta cperl changes in version 5.28.2c
249250
perl5281cdelta cperl changes in version 5.28.1c
250251
perl5280cdelta cperl changes in version 5.28.0c
251252
perl5264cdelta cperl changes in version 5.26.4c

‎pod/perl5282cdelta.pod‎

Lines changed: 171 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,171 @@
1+
=encoding utf8
2+
3+
=head1 NAME
4+
5+
perl5282cdelta - what is new for cperl v5.28.2
6+
7+
=head1 DESCRIPTION
8+
9+
This document describes the differences between the cperl 5.28.1
10+
and the cperl 5.28.2 release.
11+
12+
If you are upgrading from an earlier release such as v5.26.0c, first
13+
read the L<perl526*cdelta> documentation, which describes differences
14+
between v5.26.0c and v5.26.3c
15+
16+
=head1 Security
17+
18+
=head2 [CVE-2018-18311] Integer overflow leading to buffer overflow and segmentation fault
19+
20+
Integer arithmetic in C<Perl_my_setenv()> could wrap when the combined length
21+
of the environment variable name and value exceeded around 0x7fffffff. This
22+
could lead to writing beyond the end of an allocated buffer with attacker
23+
supplied data.
24+
25+
L<[perl #133204]|https://rt.perl.org/Ticket/Display.html?id=133204>
26+
27+
=head2 Restrict my_setenv to ARG_MAX
28+
29+
perl5 fixed C<Perl_my_setenv()> by allowing C<%ENV> sizes larger than
30+
C<ARG_MAX> (typically 128Kb), up to 2GB. This is considered a security
31+
risk. It writes onto the kernel stack, even if often caught by MAXEXECARGS
32+
"Argument list too long" kernel errors on the next exec call.
33+
cperl disallows C<%ENV> larger than the sysconf(_SC_ARG_MAX)/MAX_ARG_STRLEN/
34+
ARG_MAX/NCARGS size with a new L<perldiag/"Environment size %d larger than the allowed %d">
35+
error.
36+
37+
L<[cperl #329]|https://github.com/perl11/cperl/issues/390>. cperl-only.
38+
39+
=head2 [CVE-2018-18312] Heap-buffer-overflow write in S_regatom (regcomp.c)
40+
41+
A crafted regular expression could cause heap-buffer-overflow write during
42+
compilation, potentially allowing arbitrary code execution.
43+
44+
L<[perl #133423]|https://rt.perl.org/Ticket/Display.html?id=133423>
45+
46+
=head1 Modules and Pragmata
47+
48+
=head2 Updated Modules and Pragmata
49+
50+
=over 4
51+
52+
=item L<Cpanel::JSON::XS> 4.09
53+
54+
Silence Gconvert -Wunused-result.
55+
56+
Add unblessed_bool property (PR #118 by Pali)
57+
58+
Add seperate allow_dupkeys property, in relaxed (#122),
59+
Fixed allow_dupkeys for the XS slow path,
60+
Silence 2 -Wunused-value warnings,
61+
Fix ->unblessed_bool to produce modifiable perl structures (PR #121 by Pali).
62+
63+
=item L<ExtUtils::MakeMaker> 8.35_08
64+
65+
Added C<-flto> support for static libs (need the lto plugin) and D for
66+
deterministic builds, using arflags for AR_STATIC_ARGS, not just 'cr'.
67+
68+
fix FULLPERL for win32 cperl.
69+
cperl-only.
70+
71+
=item L<Storable> 1.12_04
72+
73+
Fix stacklimit security issues introduced in the p5p release [cperl #393].
74+
User limits must not be higher than the probed hard limits, when
75+
overridden by user code or data, via hooks or even pst data.
76+
cperl-only.
77+
78+
=back
79+
80+
=head1 Testing
81+
82+
=over 4
83+
84+
=item *
85+
86+
Added F<t/run/envsize.t> for L</Restrict my_setenv to ARG_MAX>
87+
88+
=back
89+
90+
=head1 Selected Bug Fixes
91+
92+
=over 4
93+
94+
=item *
95+
96+
Perl 5.28 introduced an C<index()> optimization when comparing to -1 (or
97+
indirectly, e.g. >= 0). When this optimization was triggered inside a C<when>
98+
clause it caused a warning ("Argument %s isn't numeric in smart match"). This
99+
has now been fixed.
100+
L<[perl #133368]|https://rt.perl.org/Ticket/Display.html?id=133368>
101+
102+
=item *
103+
104+
Matching of decimal digits in script runs, introduced in Perl 5.28, had a bug
105+
that led to C<"1\N{THAI DIGIT FIVE}"> matching C</^(*sr:\d+)$/> when it should
106+
not. This has now been fixed.
107+
108+
=item *
109+
110+
The new in-place editing code no longer leaks directory handles.
111+
L<[perl #133314]|https://rt.perl.org/Ticket/Display.html?id=133314>
112+
113+
=back
114+
115+
=head1 Acknowledgements
116+
117+
cperl 5.28.2 represents approximately 5 months of development since cperl
118+
5.28.1c and contains approximately 4,100 lines of changes across 80 files
119+
from 3 authors.
120+
121+
Excluding auto-generated files, documentation and release tools, there were
122+
approximately 1,100 lines of changes to 24 .pm, .t, .c and .h files.
123+
124+
The following people are known to have contributed the improvements that
125+
became cperl 5.28.2:
126+
127+
Reini Urban, David Mitchell, Karl Williamson.
128+
129+
Many of the changes included in this version originated in the CPAN modules
130+
included in Perl's core. We're grateful to the entire CPAN community for
131+
helping Perl to flourish.
132+
133+
For a more complete list of all of Perl's historical contributors, please
134+
see the F<AUTHORS> file in the Perl source distribution.
135+
136+
Generated with:
137+
138+
cperl Porting/acknowledgements.pl cperl-5.28.1..HEAD -c
139+
140+
=head1 Reporting Bugs
141+
142+
If you find what you think is a bug, you might check the articles recently
143+
posted to the comp.lang.perl.misc newsgroup and the perl bug database at
144+
L<https://rt.perl.org/> . There may also be information at
145+
L<http://www.perl.org/> , the Perl Home Page.
146+
147+
If you believe you have an unreported bug, please run the L<cperlbug> program
148+
included with your release. Be sure to trim your bug down to a tiny but
149+
sufficient test case. Your bug report, along with the output of C<perl -V>,
150+
will be sent off to perlbug@perl.org to be analysed by the Perl porting team.
151+
152+
If you think it's a cperl specific bug or trust the cperl developers more
153+
please file an issue at L<https://github.com/perl11/cperl/issues>.
154+
155+
If the bug you are reporting has security implications which make it
156+
inappropriate to send to a publicly archived mailing list, then see
157+
L<perlsec/SECURITY VULNERABILITY CONTACT INFORMATION>
158+
For details of how to report the issue.
159+
160+
=head1 SEE ALSO
161+
162+
The F<Changes> file for an explanation of how to view exhaustive details on
163+
what changed.
164+
165+
The F<INSTALL> file for how to build Perl.
166+
167+
The F<README> file for general stuff.
168+
169+
The F<Artistic> and F<Copying> files for copyright information.
170+
171+
=cut

‎pod/perlcdelta.pod‎

Lines changed: 25 additions & 95 deletions
Original file line numberDiff line numberDiff line change
@@ -36,20 +36,19 @@ Added C<-flto> support for static libs (need the lto plugin) and D for
3636
deterministic builds, using arflags for AR_STATIC_ARGS, not just 'cr'.
3737

3838
Fixed FULLPERL patch for cperl on Win32.
39+
cperl-only.
3940

4041
=item L<Storable> 1.12_04
4142

4243
Fix stacklimit security issues introduced in the p5p release [cperl #393].
4344
User limits must not be higher than the probed hard limits, when
4445
overridden by user code or data, via hooks or even pst data.
46+
cperl-only.
4547

4648
=back
4749

4850
=head1 Documentation
4951

50-
XXX Changes to files in F<pod/> go here. Consider grouping entries by
51-
file and be sure to link to the appropriate page, e.g. L<perlfunc>.
52-
5352
=head2 Changes to Existing Documentation
5453

5554
We have attempted to update the documentation to reflect the changes
@@ -84,118 +83,49 @@ was added.
8483

8584
=back
8685

87-
=head1 Testing
88-
89-
XXX Any significant changes to the testing of a freshly built perl should be
90-
listed here. Changes which create B<new> files in F<t/> go here as do any
91-
large changes to the testing harness (e.g. when parallel testing was added).
92-
Changes to existing files in F<t/> aren't worth summarizing, although the bugs
93-
that they represent may be covered elsewhere.
94-
95-
XXX If there were no significant test changes, say this:
96-
97-
Tests were added and changed to reflect the other additions and changes
98-
in this release.
99-
100-
XXX If instead there were significant changes, say this:
101-
102-
Tests were added and changed to reflect the other additions and
103-
changes in this release. Furthermore, these significant changes were
104-
made:
105-
106-
[ List each test improvement as an =item entry ]
107-
108-
=over 4
109-
110-
=item *
111-
112-
XXX
113-
114-
=back
115-
116-
=head1 Platform Support
117-
118-
=head2 Platform-Specific Notes
119-
120-
XXX List any changes for specific platforms. This could include configuration
121-
and compilation changes or changes in portability/compatibility. However,
122-
changes within modules for platforms should generally be listed in the
123-
L</Modules and Pragmata> section.
124-
125-
=over 4
126-
127-
=item XXX-some-platform
128-
129-
XXX
130-
131-
=back
132-
133-
=head1 Internal Changes
134-
135-
XXX Changes which affect the interface available to C<XS> code go here. Other
136-
significant internal changes for future core maintainers should be noted as
137-
well.
138-
139-
[ List each change as an =item entry ]
140-
141-
=over 4
142-
143-
=item *
144-
145-
XXX
146-
147-
=back
148-
14986
=head1 Selected Bug Fixes
15087

151-
XXX Important bug fixes in the core language are summarized here. Bug fixes in
152-
files in F<ext/> and F<lib/> are best summarized in L</Modules and Pragmata>.
153-
154-
[ List each fix as an =item entry ]
155-
15688
=over 4
15789

15890
=item *
15991

160-
XXX
161-
162-
=back
163-
164-
=head1 Known Problems
165-
166-
XXX Descriptions of platform agnostic bugs we know we can't fix go here. Any
167-
tests that had to be C<TODO>ed for the release would be noted here. Unfixed
168-
platform specific bugs also go here.
169-
170-
[ List each fix as an =item entry ]
171-
172-
=over 4
92+
Fixed assert in extended charclass.
93+
L<[perl #131649]|https://rt.perl.org/Ticket/Display.html?id=131649>
17394

17495
=item *
17596

176-
XXX
97+
Fixed SHIFT_VAR with SHORTSIZE != SIZE16.
98+
E.g. with -m32 use64bitint. cperl-only.
17799

178100
=back
179101

180-
=head1 Errata From Previous Releases
102+
=head1 Acknowledgements
181103

182-
=over 4
104+
cperl 5.26.5 represents approximately 5 months of development since cperl
105+
5.26.4c and contains approximately 2,700 lines of changes across 63 files from
106+
2 authors.
183107

184-
=item *
108+
Excluding auto-generated files, documentation and release tools, there were
109+
approximately 390 lines of changes to 17 .pm, .t, .c and .h files.
185110

186-
XXX Add anything here that we forgot to add, or were mistaken about, in
187-
the perldelta of a previous release.
111+
The following people are known to have contributed the improvements that became
112+
cperl 5.26.5:
188113

189-
=back
114+
Reini Urban, Yves Orton.
190115

191-
=head1 Obituary
116+
The list above is almost certainly incomplete as it is automatically generated
117+
from version control history including the perl and cperl repos. In particular,
118+
it does not include the names of the (very much appreciated) contributors who
119+
reported issues to the Perl bug tracker and the cperl github issues.
192120

193-
XXX If any significant core contributor has died, we've added a short obituary
194-
here.
121+
Many of the changes included in this version originated in the CPAN modules
122+
included in Perl's core. We're grateful to the entire CPAN community for
123+
helping Perl to flourish.
195124

196-
=head1 Acknowledgements
125+
For a more complete list of all of Perl's historical contributors, please see
126+
the F<AUTHORS> file in the Perl source distribution.
197127

198-
XXX Generate this with:
128+
Generated with:
199129

200130
cperl Porting/acknowledgements.pl cperl-5.26.4..HEAD -c
201131

‎t/porting/known_pod_issues.dat‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -442,6 +442,8 @@ pod/perl5280cdelta.pod Apparent broken link 50
442442
pod/perl5280cdelta.pod Apparent internal link is missing its forward slash 7
443443
pod/perl5280cdelta.pod Verbatim line length including indents exceeds 79 by 4
444444
pod/perl5280cdelta.pod alternative text. contains non-escaped | or / 1
445+
pod/perl5282cdelta.pod =item has no contents 1
446+
pod/perl5282cdelta.pod Apparent broken link 2
445447
pod/perl5290cdelta.pod Apparent broken link 29
446448
pod/perl5290cdelta.pod Pod NAME already used 1
447449
pod/perlandroid.pod Verbatim line length including indents exceeds 79 by 3

0 commit comments

Comments
 (0)