Changes for version 1.05 - 2012-02-08

  • The XS code had a code path where it could pass the contents of a Perl variable as the first argument to the XS croak() subroutine. This subroutine is like printf(), and should receive a format string as its first argument. According to RT #74777, this can lead to segfaults on some systems.
    • This could in theory be a security bug, but it's very unlikely that untrusted user input could end up being passed to this croak(). It is called when a spec specifies a "depend" value on another parameter. The value of the "depend" parameter was passed in the first argument to croak().
    • Reported by Andreas Voegele.

Modules

Validate method/function parameters

Provides

in lib/Attribute/Params/Validate.pm
in lib/Params/ValidatePP.pm
in lib/Params/ValidateXS.pm
in lib/Params/Validate/Constants.pm
in lib/Params/Validate/PP.pm
in lib/Params/Validate/XS.pm