-
Notifications
You must be signed in to change notification settings - Fork 556
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Hash randomisation breaks CPAN #12616
Comments
From @cpansproutAspect 1.03 Flags: Site configuration information for perl 5.17.7: Configured by sprout at Fri Nov 23 12:46:02 PST 2012. Summary of my perl5 (revision 5 version 17 subversion 7) configuration: Locally applied patches: @INC for perl 5.17.7: Environment for perl 5.17.7: |
From @demerphqHash randomization has not "broken" these, they were broken already What do you propose we do about this? What is the point of this ticket? Yves On 25 November 2012 22:20, Father Chrysostomos
-- |
The RT System itself - Status changed from 'new' to 'open' |
From @cpansproutOn Mon Nov 26 00:07:03 2012, demerphq wrote:
We should make sure that all these modules at least have patches before -- Father Chrysostomos |
From [Unknown Contact. See original ticket]On Mon Nov 26 00:07:03 2012, demerphq wrote:
We should make sure that all these modules at least have patches before -- Father Chrysostomos |
From @demerphqOn 26 November 2012 15:20, Father Chrysostomos via RT
Personally I don't agree. These modules, or more likely their tests, To me this is much like depending on a broken sqrt() function I fixed all such bugs in the code in core. I don't feel obliged to do cheers, -- |
From @nwc10On Mon, Nov 26, 2012 at 04:06:46PM +0100, demerphq wrote:
I think that "we" is key.
Yes your right, it isn't. But also it ends up being so, in as much as
I don't think that *you* should. (And thanks for doing all the herding of This seems an excellent task that *anyone on this list* could help chip away So, volunteers welcome. 1) Pick a module from the list Nicholas Clark * Or a single malt. |
From @bulk88On Mon Nov 26 07:07:16 2012, demerphq wrote:
My opinion is if you use undocumented behavior, and you get burned, it -- |
From @demerphqOn 26 November 2012 16:45, Nicholas Clark <nick@ccl4.org> wrote:
Ok, seen from this point of view FC's post makes more sense.
Thanks. Ill go for the single malt. Been off beer since I had my appendix out.
Note that 2) probably amount to :"search for use of keys() without Sometimes it is more devious than that, and id be happy to provide cheers, -- |
From @rjbs* demerphq <demerphq@gmail.com> [2012-11-26T10:06:46]
I just wanted to second what Nick said in his reply: you have absolutely no On the other hand, I'm not going to release a 5.18.0 that can't install LWP. -- |
From @cpansproutDateTime-Format-Flexible and Term-GentooFunctions have been fixed, Aspect 1.03 -- Father Chrysostomos |
From [Unknown Contact. See original ticket]DateTime-Format-Flexible and Term-GentooFunctions have been fixed, Aspect 1.03 -- Father Chrysostomos |
From @tomhukinsOn Sun, Nov 25, 2012 at 01:20:16PM -0800, Father Chrysostomos wrote:
I've just build blead (cd298ce) and have run LWP's test suite Can you provide further details? Thanks, |
From @demerphqOn 27 November 2012 22:24, Tom Hukins <tom@eborcom.com> wrote:
Set HTTP_PROXY to something. Then run the tests. I just pushed patches, filed a pull request, and commented on the Patch: -- |
From @cpansproutTwo more: Parse-CPAN-Packages 2.37 -- Father Chrysostomos |
From [Unknown Contact. See original ticket]Two more: Parse-CPAN-Packages 2.37 -- Father Chrysostomos |
From @karenetheridgeOn Tue Nov 27 07:32:10 2012, sprout wrote:
I'll take this one. |
From @cpansproutFive more: Reflex 0.098 -- Father Chrysostomos |
From [Unknown Contact. See original ticket]Five more: Reflex 0.098 -- Father Chrysostomos |
From @cpansproutDBI and XML-Rabbit are broken. Verilog-Perl is now fixed. Updated list: Aspect 1.03 -- Father Chrysostomos |
From [Unknown Contact. See original ticket]DBI and XML-Rabbit are broken. Verilog-Perl is now fixed. Updated list: Aspect 1.03 -- Father Chrysostomos |
From @ilmari"Father Chrysostomos via RT" <perlbug-comment@perl.org> writes:
I can't reproduce this failure with either threaded or unthreaded perl -- |
From @demerphqOn 29 November 2012 13:01, Dagfinn Ilmari Mannsåker <ilmari@ilmari.org> wrote:
Did you run it *many* times? Yves -- |
From @ilmaridemerphq <demerphq@gmail.com> writes:
I've run it over a thousand times now (for about an hour, each run takes Does anyone have an example of an actual failure? -- |
From @demerphqOn 29 November 2012 15:26, Dagfinn Ilmari Mannsåker <ilmari@ilmari.org> wrote:
Does it test anything from the environment? Yves -- |
From @cpansproutOn Thu Nov 29 06:27:36 2012, ilmari wrote:
I only added it to the list because I saw the CPAN ticket. If it’s BTW, we have three additions, Search-Tools, YUI-Loader and Graph-Easy. Aspect 1.03 (patched) -- Father Chrysostomos |
From [Unknown Contact. See original ticket]On Thu Nov 29 06:27:36 2012, ilmari wrote:
I only added it to the list because I saw the CPAN ticket. If it’s BTW, we have three additions, Search-Tools, YUI-Loader and Graph-Easy. Aspect 1.03 (patched) -- Father Chrysostomos |
From @cpansproutOn Thu Nov 29 07:05:15 2012, demerphq wrote:
This module doesn’t use each() at all. The only uses of keys are -- Father Chrysostomos |
From @karenetheridgeOn Thu Nov 29 04:03:16 2012, ilmari wrote:
That was my mistake; I misfiled this report in the chaos of the several MooseX::Getopt 0.47 seems to be okay. However, MooseX::LazyRequire 0.08 |
From @chornyAlso Net-FastCGI-0.13 - https://rt.cpan.org/Ticket/Display.html?id=81543 -- |
From @cpansproutMooseX-TrackDirty-Attributes -- Father Chrysostomos |
From [Unknown Contact. See original ticket]MooseX-TrackDirty-Attributes -- Father Chrysostomos |
From @cpansproutNet-MQTT, Catalyst-Action-REST and MooseX-MetaDescription are resolved. New list: API-Plesk 2.01 -- Father Chrysostomos |
From [Unknown Contact. See original ticket]Net-MQTT, Catalyst-Action-REST and MooseX-MetaDescription are resolved. New list: API-Plesk 2.01 -- Father Chrysostomos |
From @andkResolved: Class-AutoClass, Collection, Data-ModeMerge, New discoveries: Template-Toolkit, Try, Net-DNS-SEC, New list: API-Plesk 2.01 -- |
From @kentfredricJust hit one in MIME::Types MIME::Types->new( complete_only => 1 )->mimeTypeOf(q{pl}) # randomly chooses between "text/x-perl" and "application/x-perl" and |
From @kentfredricFound a possible hash-randomization-caused test-failure in Template::Declare |
From @kentfredricOn Tue Dec 18 21:31:21 2012, kentfredric wrote:
Specific case for this one is now resolved with However, in this case "Getting random results" appears to be somewhat |
From @kentfredricNet-Whois-IANA-0.40 fails a test due to randomization : It could be Net::CIDR's fault, but it got too complicated for me to know |
From @cpansproutApp-perlbrew, Scrappy and EntityModel are broken. MIME-Types, Test-Unit-Lite and Text-vCard are fixed. New list: API-Plesk 2.01 -- Father Chrysostomos |
From [Unknown Contact. See original ticket]App-perlbrew, Scrappy and EntityModel are broken. MIME-Types, Test-Unit-Lite and Text-vCard are fixed. New list: API-Plesk 2.01 -- Father Chrysostomos |
From @ilmari"Father Chrysostomos via RT" <perlbug-comment@perl.org> writes:
Patch in RT: <https://rt.cpan.org/Public/Bug/Display.html?id=81707#txn-1159162> -- |
From kaffeetisch@gmx.deOn 18.12.2012 08:46, Andreas Koenig wrote:
The Gtk2 failure wasn't actually resolved until now. It was due to a |
From @kentfredricJust stumbled into one in Module-CPANTS-Analyse , caused by |
From @kentfredricDBIx-Class-Schema-Config - https://rt.cpan.org/Ticket/Display.html? |
From @demerphqOn 24 January 2013 21:46, Kent Fredric via RT <perlbug-followup@perl.org> wrote:
This one says it is fixed now. Thanks for reporting this Kent. Yves -- |
From @demerphqOn 13 February 2013 22:52, Kent Fredric via RT
Perhaps it is a red herring but this sounds like it could be related to: https://rt.cpan.org/Public/Bug/Display.html?id=81516 Yves -- |
From kaffeetisch@gmx.deOn 23.12.2012 23:23, Father Chrysostomos via RT wrote:
I think this is fixed when running against Glib 1.290, right Kevin? |
From @ilmari"Kent Fredric via RT" <perlbug-followup@perl.org> writes:
Patch attach to the ticket. -- |
From user42@zip.com.auTorsten Schoenfeld <kaffeetisch@gmx.de> writes:
Yes I think so, though I don't have a way to test it as yet. |
From @kentfredricOn Sat Feb 16 10:39:46 2013, ilmari wrote:
Resolved. |
From @nwc10On Sun Dec 23 14:23:41 2012, sprout wrote:
Ash reports that this is fixed in 0.06, now on CPAN. Nicholas Clark |
From @rjbsThese libraries will stay broken until they are fixed by their maintainers. This is no longer -- |
From [Unknown Contact. See original ticket]These libraries will stay broken until they are fixed by their maintainers. This is no longer -- |
@rjbs - Status changed from 'open' to 'resolved' |
Migrated from rt.perl.org#115908 (status was 'resolved')
Searchable as RT115908$
The text was updated successfully, but these errors were encountered: