{"push_id":1210584108,"size":15,"distinct_size":0,"ref":"refs/heads/branch-point","head":"eabb189f117471d96a8b2155a05e2714461ae521","before":"b6ab00ee2daef8701e3f5a660e7c70a77cb20ef1","commits":[{"sha":"5f8a169909434d50fd324974e377c0ec4de6b0d6","author":{"name":"Reini Urban","email":"124d4de0b2391c49441429d4e282b8f880187ae3@cpanel.net"},"message":"B::Stash - XSLoader security from 0.22\n\nFixes https://rt.cpan.org/Ticket/Display.html?id=116201\nto avoid exploitable invalid \"(eval 1)\" rootdir.","distinct":false,"url":"https://api.github.com/repos/perl11/cperl/commits/5f8a169909434d50fd324974e377c0ec4de6b0d6"},{"sha":"da1c980bc978475bcffe382a9ad8c0303fe0971e","author":{"name":"Reini Urban","email":"124d4de0b2391c49441429d4e282b8f880187ae3@cpanel.net"},"message":"perl5240delta + perl5222delta pods","distinct":false,"url":"https://api.github.com/repos/perl11/cperl/commits/da1c980bc978475bcffe382a9ad8c0303fe0971e"},{"sha":"09147e21d85574fb2c1c30269b9cd5f8d232e753","author":{"name":"Reini Urban","email":"124d4de0b2391c49441429d4e282b8f880187ae3@cpanel.net"},"message":"perldelta.pod: cperl fixups","distinct":false,"url":"https://api.github.com/repos/perl11/cperl/commits/09147e21d85574fb2c1c30269b9cd5f8d232e753"},{"sha":"910fa055a1972b235a778e658a82fcce4f1b621b","author":{"name":"Reini Urban","email":"124d4de0b2391c49441429d4e282b8f880187ae3@cpanel.net"},"message":"perldelta.pod: Update 5.24.0 known problems\n\nNot fixed with 5.24.1, only with cperl, some with perl 5.26\nand some with Suse perl.","distinct":false,"url":"https://api.github.com/repos/perl11/cperl/commits/910fa055a1972b235a778e658a82fcce4f1b621b"},{"sha":"d0534d34d935d8417f7373a32bf3799ee07add72","author":{"name":"Reini Urban","email":"124d4de0b2391c49441429d4e282b8f880187ae3@cpanel.net"},"message":"perlcdelta: add more issue links","distinct":false,"url":"https://api.github.com/repos/perl11/cperl/commits/d0534d34d935d8417f7373a32bf3799ee07add72"},{"sha":"43ecdfd4181e3c283466e86ac37062f173b9b581","author":{"name":"Tony Cook","email":"59db37dd0a1458e16c2dffa797f972d03fa29423@develop-help.com"},"message":"[perl #125096] detect attribute used and use it\n\ngcc with -O2 -flto builds can optimize out all the references to\nthe function we are probing for, mark the function as used to avoid that.","distinct":false,"url":"https://api.github.com/repos/perl11/cperl/commits/43ecdfd4181e3c283466e86ac37062f173b9b581"},{"sha":"7a2e8b62a3cc15f9260257a236482b0d49e72752","author":{"name":"Reini Urban","email":"124d4de0b2391c49441429d4e282b8f880187ae3@cpanel.net"},"message":"Config: add d_attribute_used","distinct":false,"url":"https://api.github.com/repos/perl11/cperl/commits/7a2e8b62a3cc15f9260257a236482b0d49e72752"},{"sha":"6a858e7a527e4868ab0a41e05158f6506b9b33a7","author":{"name":"Reini Urban","email":"124d4de0b2391c49441429d4e282b8f880187ae3@cpanel.net"},"message":"more attribute_used support\n\nevtl. needed for better -flto support with certain symbols.","distinct":false,"url":"https://api.github.com/repos/perl11/cperl/commits/6a858e7a527e4868ab0a41e05158f6506b9b33a7"},{"sha":"f0e5d903df23ad47161709bb4209fe0a85c10e9d","author":{"name":"Reini Urban","email":"124d4de0b2391c49441429d4e282b8f880187ae3@cpanel.net"},"message":"perlcdelta: -flto support","distinct":false,"url":"https://api.github.com/repos/perl11/cperl/commits/f0e5d903df23ad47161709bb4209fe0a85c10e9d"},{"sha":"547b329284a51aaa11366ff35c136c07d5afe4f5","author":{"name":"Reini Urban","email":"124d4de0b2391c49441429d4e282b8f880187ae3@cpanel.net"},"message":"XSLoader: fix cpan #115808 security\n\nSync our c code with XSLoader 0.22.\nOur code already had most of the old .pm problems already solved:\n(eval \\d) is already filtered out with cperl, just\nrelative #line \\d filenames could lead to exploits.\n\nSee https://rt.cpan.org/Ticket/Display.html?id=115808\n\nMake XSLoader fall back to Dynaloader’s @INC search if the calling file has a\nrelative path that is not found in @INC.\nThe filename before auto needs to be absolute and needs to end with a /.\nCloses #184.\n\nSee http://perl5.git.perl.org/perl.git/commitdiff/08e3451d7b3b714ad63a27f1b9c2a23ee75d15ee\n(initial fix)\nand http://perl5.git.perl.org/perl.git/commitdiff/a651dcdf6a9151150dcf0fb6b18849d3e39b0811\n(Windows drive letters as abs) for the perl5 fixes.\n\nOne other occurance in B::Stash already fixed with 5f8a169.","distinct":false,"url":"https://api.github.com/repos/perl11/cperl/commits/547b329284a51aaa11366ff35c136c07d5afe4f5"},{"sha":"35c912bb21a16154f3b4494121c34d440a1cff8c","author":{"name":"Reini Urban","email":"124d4de0b2391c49441429d4e282b8f880187ae3@cpanel.net"},"message":"XSLoader: allow relative file if in @INC\n\nand add ENTER/LEAVE to for external callbacks\nand the main xs","distinct":false,"url":"https://api.github.com/repos/perl11/cperl/commits/35c912bb21a16154f3b4494121c34d440a1cff8c"},{"sha":"1e739db56641eb7cd971f42ca0fbedabf3114eea","author":{"name":"Reini Urban","email":"124d4de0b2391c49441429d4e282b8f880187ae3@cpanel.net"},"message":"XSLoader: fix new failing cperl test\n\nThe goto corrupts the CX stack #167. unrelated to the security\nfix #184.","distinct":false,"url":"https://api.github.com/repos/perl11/cperl/commits/1e739db56641eb7cd971f42ca0fbedabf3114eea"},{"sha":"c233ba0ae97be663a8ed7bb03e19122ee955c396","author":{"name":"Reini Urban","email":"124d4de0b2391c49441429d4e282b8f880187ae3@cpanel.net"},"message":"lib/perl5db.t: save/restore t/.perldb","distinct":false,"url":"https://api.github.com/repos/perl11/cperl/commits/c233ba0ae97be663a8ed7bb03e19122ee955c396"},{"sha":"69a8c254fff27c74f3a8c5c9ab00556b53ccbc1c","author":{"name":"Reini Urban","email":"124d4de0b2391c49441429d4e282b8f880187ae3@cpanel.net"},"message":"perlcdelta: XSLoader security","distinct":false,"url":"https://api.github.com/repos/perl11/cperl/commits/69a8c254fff27c74f3a8c5c9ab00556b53ccbc1c"},{"sha":"eabb189f117471d96a8b2155a05e2714461ae521","author":{"name":"Reini Urban","email":"124d4de0b2391c49441429d4e282b8f880187ae3@cpanel.net"},"message":"cperl-5.24.0-RC5 released\n\n2 bigger changes:\n* XSLoader security\n* d_attribute_used for -flto support\nand:\n* Sun cc bug: SvREADONLY_off as statement only\n* -Dv: change == max refcnt: to -DC","distinct":false,"url":"https://api.github.com/repos/perl11/cperl/commits/eabb189f117471d96a8b2155a05e2714461ae521"}]}
{"actor":{"display_login":"rurban"}}