Hey everyone,

Following is the p5p (Perl 5 Porters) mailing list summary for the past week. Enjoy!

July 6th-12th

News and updates

Salvatore Bonaccorso reported a security issue in XSLoader to receive a proper CVE ID for it. The fix was already committed in perl.

Father Chrysostomos notifies he created a branch with work to finally remove the deprecated ${^ENCODING} functionality and makes encoding die when its invocation would use that functionality. It also recommends Filter::Encoding as an alternative.

Grant reports

Dave Mitchell provided the Grant #2 report for June and reports #134 and #135.

Issues

New issues

Shlomi Fish reported what Father Chrysostomos confirmed is a stack referencing bug.

Resolved issues

Rejected issues

Proposed patches

Tony Cook provides a patch in Perl #128564 to increase parallelization for GNU make builds on Win32.

Dan Collins provides a patch in Perl #30807 to change the text of two messages to propose that the data might also be corrupt or not a Storable binary image.

Dan Collins also provides a patch in Perl #33156 to fix a core API documentation problem.

Father Chrysostomos provides a patch in Perl #128588 to properly handle tied hashes for references to references in ref calls.

Graham Knop provided a patch to fix warnings in Data::Dumper test on old perl.

Tony Cook provided a patch for Perl #128524 (Data::Dumper gets string lengths wrong when the utf8 flag is set).

Discussion

Karl Williamson started a very interesting discussion on a possible security-related use of Unicode. Since different scripts might have characters that look similar, it is possible to provide a different Unicode script of a similar-looking character as part of a string, thus mixing the Unicode scripts. Karl suggests adding a feature to regular expression to check for same-script string ("script-run"). The discussion takes place on the best syntax for it in regular expressions.

Dave Mitchell summerized the possible solutions for the /$empty/ issue, with a new suggestion on how to approach it.