diff options
Diffstat (limited to 'systems/texlive/tlnet/tlpkg/tlperl/lib/SDBM_File.pm')
-rw-r--r-- | systems/texlive/tlnet/tlpkg/tlperl/lib/SDBM_File.pm | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/systems/texlive/tlnet/tlpkg/tlperl/lib/SDBM_File.pm b/systems/texlive/tlnet/tlpkg/tlperl/lib/SDBM_File.pm index 5df9085760..30e380a6bb 100644 --- a/systems/texlive/tlnet/tlpkg/tlperl/lib/SDBM_File.pm +++ b/systems/texlive/tlnet/tlpkg/tlperl/lib/SDBM_File.pm @@ -7,7 +7,7 @@ require Tie::Hash; require XSLoader; our @ISA = qw(Tie::Hash); -our $VERSION = "1.14"; +our $VERSION = "1.15"; our @EXPORT_OK = qw(PAGFEXT DIRFEXT PAIRMAX); use Exporter "import"; @@ -119,6 +119,14 @@ This warning is emitted when you try to store a key or a value that is too long. It means that the change was not recorded in the database. See BUGS AND WARNINGS below. +=head1 SECURITY WARNING + +B<Do not accept SDBM files from untrusted sources!> + +The sdbm file format was designed for speed and convenience, not for +portability or security. A maliciously crafted file might cause perl to +crash or even expose a security vulnerability. + =head1 BUGS AND WARNINGS There are a number of limits on the size of the data that you can |