Bug#862373: Unconditionally instantiates objects from yaml data

Dominique Dumont dod at debian.org
Fri May 12 06:03:12 UTC 2017


> As previously mentioned in debian-perl@, there is no easy solution,

A possibility to limit the impact is to deny object creation if the class has 
a DESTROY method.

Knowing that UNIVERSAL has no DESTROY method, It's fairly easy to test:

$ perl -MFile::Temp -E 'say File::Temp->can("DESTROY") ? "yes" : "no";'
yes
$ perl -E 'say UNIVERSAL->can("DESTROY") ? "yes" : "no";'
no
$ perl -MGetopt::Long -E 'say Getopt::Long->can("DESTROY") ? "yes" : "no";'
no

HTH

-- 
 https://github.com/dod38fr/   -o- http://search.cpan.org/~ddumont/
http://ddumont.wordpress.com/  -o-   irc: dod at irc.debian.org



More information about the pkg-perl-maintainers mailing list