/ 
PAR-0.83
/ PAR::Filter
Security Advisories (2)
CVE-2011-4114 (2011-07-18)

PAR packed files are extracted to unsafe and predictable temporary directories (this bug was originally reported against PAR::Packer, but it applies to PAR as well).

CVE-2011-5060 (2012-01-13)

The par_mktmpdir function in the PAR module before 1.003 for Perl creates temporary files in a directory with a predictable name without verifying ownership and permissions of this directory, which allows local users to overwrite files when another user extracts a PAR packed program, a different vulnerability in a different package than CVE-2011-4114.

NAME

PAR::Filter - Input filter for PAR

SYNOPSIS

$code = 'use strict; print "Hello, World!\n";';
$ref = PAR::Filter->new('PodStrip', 'Bleach')->apply(\$code);
print $code;    # pod-stripped and obfuscated code
print $$ref;    # same thing

$ref = PAR::Filter->new('PodStrip', 'Bleach')->apply('file.pl');
print $$ref;    # same thing, applied to file.pl

DESCRIPTION

Starting with PAR 0.76, pp -f takes a filter name, like Bleach, and invokes this module to transform the programs with PAR::Filter::Bleach. Similarily, pp -F Bleach applies the Bleach filter to all included modules.

It is possible to pass in multiple such filters, which are applied in turn.

The output of each such filter is expected be semantically equivalent to the input, although possibly obfuscated.

The default list of filters include:

AUTHORS

Autrijus Tang <autrijus@autrijus.org>

COPYRIGHT

Copyright 2003, 2004 by Autrijus Tang <autrijus@autrijus.org>.

This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

See http://www.perl.com/perl/misc/Artistic.html