In perl.git, the branch smoke-me/relocatable-sitecustomize has been created
<http://perl5.git.perl.org/perl.git/commitdiff/884526b1712678dd0761e295944f9829b2d737b1?hp=0000000000000000000000000000000000000000> at 884526b1712678dd0761e295944f9829b2d737b1 (commit) - Log ----------------------------------------------------------------- commit 884526b1712678dd0761e295944f9829b2d737b1 Author: Nicholas Clark <[email protected]> Date: Thu Nov 24 20:38:08 2011 +0100 Small tidyups in S_incpush() and S_mayberelocate() Following commit 816005240f1a3b99, which moved VMS-specific code, we can now assign to subdir at the point of declaration. After the refactoring that moved code into S_mayberelocate(), we can assign to libdir at the point of declaration. In turn, this allows the merging of two #ifndef PERL_IS_MINIPERL blocks. Remove a blank line from S_mayberelocate(). M perl.c commit 0e19882df6f1beab2320f36f85ba25cfe3838011 Author: Nicholas Clark <[email protected]> Date: Thu Nov 24 18:11:32 2011 +0100 Avoid attacks on sitecustomize by using NUL delimiters to wrap filenames. Previously the generated code used regular '' strings, which meant that a crafted pathname containing ' characters could be used to inject code. Until the previous commit, this was only a problem if building in or Configuring to install to such a directory. Which, hopefully, would be "obviously wrong" to anyone capable of building Perl from source. However, fixing the bug that prevented sitecustomize being subject to relocatable include now means that for a relocatable pearl, an end-user controlled path can now reach the sitecusomize code. M perl.c commit 5f8476f2d2d46b57773c3d635ebb687e25379701 Author: Carl Hayter <[email protected]> Date: Thu Nov 24 17:49:50 2011 +0100 Make sitecustomize relocatableinc aware When -Dusesitecustomize is used with -Duserelocatableinc, SITELIB_EXP/sitecustomize.pl is not found due to SITELIB_EXP having a '.../..' relocation path. This patch refactors the path relocation code from S_incpush() into S_mayberelocate() so that it can be used in both S_incpush() and in usesitecustomize's use of SITELIB_EXP. M AUTHORS M embed.fnc M embed.h M perl.c M proto.h ----------------------------------------------------------------------- -- Perl5 Master Repository
