Skip Menu |
Report information
Id: 115908
Status: resolved
Priority: 0/
Queue: perl5

Owner: Nobody
Requestors:
Cc: bulk88 <bulk88 [at] hotmail.com>
AdminCc:

Operating System: darwin
PatchStatus: (no value)
Severity: low
Type: core
Perl Version: 5.17.7
Fixed In: (no value)



Subject: Hash randomisation breaks CPAN
Date: Sun, 25 Nov 2012 13:19:55 -0800
To: perlbug [...] perl.org
From: Father Chrysostomos <sprout [...] cpan.org>
Aspect 1.03 Autocache 0.004 CatalystX-Controller-Sugar 0.0901 Class-AutoClass 1.54 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 Crypt-OpenPGP 1.06 DateTime-Format-Flexible 0.23 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Hash-AutoHash-Args 1.15 libwww-perl 6.04 MooseX-Getopt 0.47 Params-Validate-Checks 0.01 Socialtext-Resting 0.38 Term-GentooFunctions 1.3605 Test-Inline 2.212 Tie-Hash-Indexed 0.05 WebService-Simple 0.18 XML-TinyXML 0.30 --- Flags: category=core severity=low --- Site configuration information for perl 5.17.7: Configured by sprout at Fri Nov 23 12:46:02 PST 2012. Summary of my perl5 (revision 5 version 17 subversion 7) configuration: Commit id: de0df3c095e361fff88c58066233c2210f8a55b1 Platform: osname=darwin, osvers=10.5.0, archname=darwin-thread-multi-2level uname='darwin pint.local 10.5.0 darwin kernel version 10.5.0: fri nov 5 23:20:39 pdt 2010; root:xnu-1504.9.17~1release_i386 i386 ' config_args='-de -DDEBUGGING -Duseithreads -Dusedevel -Accflags=-DPERL_NEW_COPY_ON_WRITE' hint=recommended, useposix=true, d_sigaction=define useithreads=define, usemultiplicity=define useperlio=define, d_sfio=undef, uselargefiles=define, usesocks=undef use64bitint=undef, use64bitall=undef, uselongdouble=undef usemymalloc=n, bincompat5005=undef Compiler: cc='cc', ccflags ='-fno-common -DPERL_DARWIN -DPERL_NEW_COPY_ON_WRITE -DDEBUGGING -fno-strict-aliasing -pipe -fstack-protector -I/usr/local/include', optimize='-O3 -g', cppflags='-fno-common -DPERL_DARWIN -DPERL_NEW_COPY_ON_WRITE -DDEBUGGING -fno-strict-aliasing -pipe -fstack-protector -I/usr/local/include' ccversion='', gccversion='4.2.1 (Apple Inc. build 5664)', gccosandvers='' intsize=4, longsize=4, ptrsize=4, doublesize=8, byteorder=1234 d_longlong=define, longlongsize=8, d_longdbl=define, longdblsize=16 ivtype='long', ivsize=4, nvtype='double', nvsize=8, Off_t='off_t', lseeksize=8 alignbytes=8, prototype=define Linker and Libraries: ld='env MACOSX_DEPLOYMENT_TARGET=10.3 cc', ldflags =' -fstack-protector -L/usr/local/lib' libpth=/usr/local/lib /usr/lib libs=-ldbm -ldl -lm -lutil -lc perllibs=-ldl -lm -lutil -lc libc=, so=dylib, useshrplib=false, libperl=libperl.a gnulibc_version='' Dynamic Linking: dlsrc=dl_dlopen.xs, dlext=bundle, d_dlsymun=undef, ccdlflags=' ' cccdlflags=' ', lddlflags=' -bundle -undefined dynamic_lookup -L/usr/local/lib -fstack-protector' Locally applied patches: --- @INC for perl 5.17.7: /usr/local/lib/perl5/site_perl/5.17.7/darwin-thread-multi-2level /usr/local/lib/perl5/site_perl/5.17.7 /usr/local/lib/perl5/5.17.7/darwin-thread-multi-2level /usr/local/lib/perl5/5.17.7 /usr/local/lib/perl5/site_perl . --- Environment for perl 5.17.7: DYLD_LIBRARY_PATH (unset) HOME=/Users/sprout LANG=en_US.UTF-8 LANGUAGE (unset) LD_LIBRARY_PATH (unset) LOGDIR (unset) PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin:/usr/X11/bin:/usr/local/bin PERL_BADLANG (unset) SHELL=/bin/bash
CC: bugs-bitbucket [...] rt.perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Mon, 26 Nov 2012 09:06:16 +0100
To: perl5-porters [...] perl.org
From: demerphq <demerphq [...] gmail.com>
Download (untitled) / with headers
text/plain 3.6k
Hash randomization has not "broken" these, they were broken already and nobody knew. What do you propose we do about this? What is the point of this ticket? Yves On 25 November 2012 22:20, Father Chrysostomos <perlbug-followup@perl.org> wrote: Show quoted text
> # New Ticket Created by Father Chrysostomos > # Please include the string: [perl #115908] > # in the subject line of all future correspondence about this issue. > # <URL: https://rt.perl.org:443/rt3/Ticket/Display.html?id=115908 > > > > Aspect 1.03 > Autocache 0.004 > CatalystX-Controller-Sugar 0.0901 > Class-AutoClass 1.54 > Convert-yEnc 1.04 > cPanel-PublicAPI 1.002 > Crypt-OpenPGP 1.06 > DateTime-Format-Flexible 0.23 > FormValidator-LazyWay 0.19 > Google-AJAX-Library 0.022 > Hash-AutoHash-Args 1.15 > libwww-perl 6.04 > MooseX-Getopt 0.47 > Params-Validate-Checks 0.01 > Socialtext-Resting 0.38 > Term-GentooFunctions 1.3605 > Test-Inline 2.212 > Tie-Hash-Indexed 0.05 > WebService-Simple 0.18 > XML-TinyXML 0.30 > > --- > Flags: > category=core > severity=low > --- > Site configuration information for perl 5.17.7: > > Configured by sprout at Fri Nov 23 12:46:02 PST 2012. > > Summary of my perl5 (revision 5 version 17 subversion 7) configuration: > Commit id: de0df3c095e361fff88c58066233c2210f8a55b1 > Platform: > osname=darwin, osvers=10.5.0, archname=darwin-thread-multi-2level > uname='darwin pint.local 10.5.0 darwin kernel version 10.5.0: fri nov 5 23:20:39 pdt 2010; root:xnu-1504.9.17~1release_i386 i386 ' > config_args='-de -DDEBUGGING -Duseithreads -Dusedevel -Accflags=-DPERL_NEW_COPY_ON_WRITE' > hint=recommended, useposix=true, d_sigaction=define > useithreads=define, usemultiplicity=define > useperlio=define, d_sfio=undef, uselargefiles=define, usesocks=undef > use64bitint=undef, use64bitall=undef, uselongdouble=undef > usemymalloc=n, bincompat5005=undef > Compiler: > cc='cc', ccflags ='-fno-common -DPERL_DARWIN -DPERL_NEW_COPY_ON_WRITE -DDEBUGGING -fno-strict-aliasing -pipe -fstack-protector -I/usr/local/include', > optimize='-O3 -g', > cppflags='-fno-common -DPERL_DARWIN -DPERL_NEW_COPY_ON_WRITE -DDEBUGGING -fno-strict-aliasing -pipe -fstack-protector -I/usr/local/include' > ccversion='', gccversion='4.2.1 (Apple Inc. build 5664)', gccosandvers='' > intsize=4, longsize=4, ptrsize=4, doublesize=8, byteorder=1234 > d_longlong=define, longlongsize=8, d_longdbl=define, longdblsize=16 > ivtype='long', ivsize=4, nvtype='double', nvsize=8, Off_t='off_t', lseeksize=8 > alignbytes=8, prototype=define > Linker and Libraries: > ld='env MACOSX_DEPLOYMENT_TARGET=10.3 cc', ldflags =' -fstack-protector -L/usr/local/lib' > libpth=/usr/local/lib /usr/lib > libs=-ldbm -ldl -lm -lutil -lc > perllibs=-ldl -lm -lutil -lc > libc=, so=dylib, useshrplib=false, libperl=libperl.a > gnulibc_version='' > Dynamic Linking: > dlsrc=dl_dlopen.xs, dlext=bundle, d_dlsymun=undef, ccdlflags=' ' > cccdlflags=' ', lddlflags=' -bundle -undefined dynamic_lookup -L/usr/local/lib -fstack-protector' > > Locally applied patches: > > > --- > @INC for perl 5.17.7: > /usr/local/lib/perl5/site_perl/5.17.7/darwin-thread-multi-2level > /usr/local/lib/perl5/site_perl/5.17.7 > /usr/local/lib/perl5/5.17.7/darwin-thread-multi-2level > /usr/local/lib/perl5/5.17.7 > /usr/local/lib/perl5/site_perl > . > > --- > Environment for perl 5.17.7: > DYLD_LIBRARY_PATH (unset) > HOME=/Users/sprout > LANG=en_US.UTF-8 > LANGUAGE (unset) > LD_LIBRARY_PATH (unset) > LOGDIR (unset) > PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin:/usr/X11/bin:/usr/local/bin > PERL_BADLANG (unset) > SHELL=/bin/bash >
-- perl -Mre=debug -e "/just|another|perl|hacker/"
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 324b
On Mon Nov 26 00:07:03 2012, demerphq wrote: Show quoted text
> Hash randomization has not "broken" these, they were broken already > and nobody knew. > > What do you propose we do about this? What is the point of this > ticket?
We should make sure that all these modules at least have patches before 5.18 ships. -- Father Chrysostomos
CC: perl5-porters [...] perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Mon, 26 Nov 2012 16:06:46 +0100
To: perlbug-comment [...] perl.org
From: demerphq <demerphq [...] gmail.com>
Download (untitled) / with headers
text/plain 952b
On 26 November 2012 15:20, Father Chrysostomos via RT <perlbug-comment@perl.org> wrote: Show quoted text
> On Mon Nov 26 00:07:03 2012, demerphq wrote:
>> Hash randomization has not "broken" these, they were broken already >> and nobody knew. >> >> What do you propose we do about this? What is the point of this >> ticket?
> > We should make sure that all these modules at least have patches before > 5.18 ships.
Personally I don't agree. These modules, or more likely their tests, are buggy, making incorrect assumptions. To me this is much like depending on a broken sqrt() function returning 2 for the square root of 5. Any fallout from fixing such a bug is IMO not our problem. I fixed all such bugs in the code in core. I don't feel obliged to do so for all such bugs on CPAN. Although if the community, through the pumpking, decides otherwise I will be happy to contribute to the solution. cheers, Yves -- perl -Mre=debug -e "/just|another|perl|hacker/"
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Mon, 26 Nov 2012 15:45:50 +0000
To: perlbug-comment [...] perl.org, perl5-porters [...] perl.org
From: Nicholas Clark <nick [...] ccl4.org>
Download (untitled) / with headers
text/plain 1.8k
On Mon, Nov 26, 2012 at 04:06:46PM +0100, demerphq wrote: Show quoted text
> On 26 November 2012 15:20, Father Chrysostomos via RT > <perlbug-comment@perl.org> wrote:
> > On Mon Nov 26 00:07:03 2012, demerphq wrote:
> >> Hash randomization has not "broken" these, they were broken already > >> and nobody knew. > >> > >> What do you propose we do about this? What is the point of this > >> ticket?
> > > > We should make sure that all these modules at least have patches before > > 5.18 ships.
> > Personally I don't agree. These modules, or more likely their tests, > are buggy, making incorrect assumptions.
I think that "we" is key. Show quoted text
> To me this is much like depending on a broken sqrt() function > returning 2 for the square root of 5. Any fallout from fixing such a > bug is IMO not our problem.
Yes your right, it isn't. But also it ends up being so, in as much as rule 1 (the other rule 1) "people are stupid", and end up blaming the most obvious thing that they last changed, which in this case could well be an attempt to upgrade core perl. (Which can mean that they *don't* upgrade, which in the short term doesn't affect us, but in the long term kills us) Show quoted text
> I fixed all such bugs in the code in core. I don't feel obliged to do > so for all such bugs on CPAN. Although if the community, through the > pumpking, decides otherwise I will be happy to contribute to the > solution.
I don't think that *you* should. (And thanks for doing all the herding of bugs on dual life modules, as well as the core C changes). Please relax and enjoy a well earned beer (or two)* This seems an excellent task that *anyone on this list* could help chip away at, given that likely all it needs is a knowledge of perl. So, volunteers welcome. 1) Pick a module from the list 2) figure out the fix 3) send a patch to that module's bugtracker 4) feel good Nicholas Clark * Or a single malt.
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 1.2k
On Mon Nov 26 07:07:16 2012, demerphq wrote: Show quoted text
> On 26 November 2012 15:20, Father Chrysostomos via RT > <perlbug-comment@perl.org> wrote:
> > On Mon Nov 26 00:07:03 2012, demerphq wrote:
> >> Hash randomization has not "broken" these, they were broken already > >> and nobody knew. > >> > >> What do you propose we do about this? What is the point of this > >> ticket?
> > > > We should make sure that all these modules at least have patches before > > 5.18 ships.
> > Personally I don't agree. These modules, or more likely their tests, > are buggy, making incorrect assumptions. > > To me this is much like depending on a broken sqrt() function > returning 2 for the square root of 5. Any fallout from fixing such a > bug is IMO not our problem. > > I fixed all such bugs in the code in core. I don't feel obliged to do > so for all such bugs on CPAN. Although if the community, through the > pumpking, decides otherwise I will be happy to contribute to the > solution. > > cheers, > Yves > >
My opinion is if you use undocumented behavior, and you get burned, it is your fault alone. perldoc has had the hash order warning for about 10 years http://perl5.git.perl.org/perl.git/commit/4546b9e60350d925ea9a8210378c9e1a79f4a7ab . -- bulk88 ~ bulk88 at hotmail.com
CC: perlbug-comment [...] perl.org, perl5-porters [...] perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Mon, 26 Nov 2012 17:46:32 +0100
To: Nicholas Clark <nick [...] ccl4.org>
From: demerphq <demerphq [...] gmail.com>
Download (untitled) / with headers
text/plain 2.3k
On 26 November 2012 16:45, Nicholas Clark <nick@ccl4.org> wrote: Show quoted text
> On Mon, Nov 26, 2012 at 04:06:46PM +0100, demerphq wrote:
>> On 26 November 2012 15:20, Father Chrysostomos via RT >> <perlbug-comment@perl.org> wrote:
>> > On Mon Nov 26 00:07:03 2012, demerphq wrote:
>> >> Hash randomization has not "broken" these, they were broken already >> >> and nobody knew. >> >> >> >> What do you propose we do about this? What is the point of this >> >> ticket?
>> > >> > We should make sure that all these modules at least have patches before >> > 5.18 ships.
>> >> Personally I don't agree. These modules, or more likely their tests, >> are buggy, making incorrect assumptions.
> > I think that "we" is key. >
>> To me this is much like depending on a broken sqrt() function >> returning 2 for the square root of 5. Any fallout from fixing such a >> bug is IMO not our problem.
> > Yes your right, it isn't. But also it ends up being so, in as much as > rule 1 (the other rule 1) "people are stupid", and end up blaming the most > obvious thing that they last changed, which in this case could well be an > attempt to upgrade core perl. (Which can mean that they *don't* upgrade, > which in the short term doesn't affect us, but in the long term kills us)
Ok, seen from this point of view FC's post makes more sense. Show quoted text
>> I fixed all such bugs in the code in core. I don't feel obliged to do >> so for all such bugs on CPAN. Although if the community, through the >> pumpking, decides otherwise I will be happy to contribute to the >> solution.
> > I don't think that *you* should. (And thanks for doing all the herding of > bugs on dual life modules, as well as the core C changes). Please relax and > enjoy a well earned beer (or two)*
Thanks. Ill go for the single malt. Been off beer since I had my appendix out. Show quoted text
> This seems an excellent task that *anyone on this list* could help chip away > at, given that likely all it needs is a knowledge of perl. > > So, volunteers welcome. > > 1) Pick a module from the list > 2) figure out the fix > 3) send a patch to that module's bugtracker > 4) feel good
Note that 2) probably amount to :"search for use of keys() without sort, sort the keys, repeat until problem goes away". Sometimes it is more devious than that, and id be happy to provide support in such a case. cheers, Yves -- perl -Mre=debug -e "/just|another|perl|hacker/"
CC: perlbug-comment [...] perl.org, perl5-porters [...] perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Mon, 26 Nov 2012 16:03:19 -0500
To: demerphq <demerphq [...] gmail.com>
From: Ricardo Signes <perl.p5p [...] rjbs.manxome.org>
Download (untitled) / with headers
text/plain 742b
* demerphq <demerphq@gmail.com> [2012-11-26T10:06:46] Show quoted text
> On 26 November 2012 15:20, Father Chrysostomos via RT
> > > > We should make sure that all these modules at least have patches before > > 5.18 ships.
> > [...] > I fixed all such bugs in the code in core. I don't feel obliged to do > so for all such bugs on CPAN. Although if the community, through the > pumpking, decides otherwise I will be happy to contribute to the > solution.
I just wanted to second what Nick said in his reply: you have absolutely no obligation, and shouldn't feel that you do! You should enjoy a nice /^whiske?y$/. On the other hand, I'm not going to release a 5.18.0 that can't install LWP. :-) So the ticket is quite useful for me, at least. -- rjbs
Download signature.asc
application/pgp-signature 490b

Message body not shown because it is not plain text.

RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 497b
DateTime-Format-Flexible and Term-GentooFunctions have been fixed, leaving these: Aspect 1.03 Autocache 0.004 CatalystX-Controller-Sugar 0.0901 Class-AutoClass 1.54 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 Crypt-OpenPGP 1.06 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Hash-AutoHash-Args 1.15 libwww-perl 6.04 MooseX-Getopt 0.47 Params-Validate-Checks 0.01 Socialtext-Resting 0.38 Test-Inline 2.212 Tie-Hash-Indexed 0.05 WebService-Simple 0.18 XML-TinyXML 0.30 -- Father Chrysostomos
CC: perl5-porters [...] perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Tue, 27 Nov 2012 21:24:50 +0000
To: Father Chrysostomos <perlbug-followup [...] perl.org>
From: Tom Hukins <tom [...] eborcom.com>
Download (untitled) / with headers
text/plain 376b
On Sun, Nov 25, 2012 at 01:20:16PM -0800, Father Chrysostomos wrote: Show quoted text
> libwww-perl 6.04
I've just build blead (cd298ce42eb) and have run LWP's test suite repeatedly. I can't make it fail. Furthermore I can't see any test failures at http://www.cpantesters.org/distro/L/libwww-perl.html that appear due to hash randomisation. Can you provide further details? Thanks, Tom
CC: Father Chrysostomos <perlbug-followup [...] perl.org>, perl5-porters [...] perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Tue, 27 Nov 2012 22:37:43 +0100
To: Tom Hukins <tom [...] eborcom.com>
From: demerphq <demerphq [...] gmail.com>
Download (untitled) / with headers
text/plain 746b
On 27 November 2012 22:24, Tom Hukins <tom@eborcom.com> wrote: Show quoted text
> On Sun, Nov 25, 2012 at 01:20:16PM -0800, Father Chrysostomos wrote:
>> libwww-perl 6.04
> > I've just build blead (cd298ce42eb) and have run LWP's test suite > repeatedly. I can't make it fail. Furthermore I can't see any test > failures at http://www.cpantesters.org/distro/L/libwww-perl.html that > appear due to hash randomisation. > > Can you provide further details?
Set HTTP_PROXY to something. Then run the tests. I just pushed patches, filed a pull request, and commented on the ticket via RT with further details. Patch: https://github.com/demerphq/libwww-perl/commit/96791d2f72dc20ab6ff3c6ce6442a8db509bcfcc -- perl -Mre=debug -e "/just|another|perl|hacker/"
RT-Send-CC: perl5-porters [...] perl.org
Two more: Parse-CPAN-Packages 2.37 SQL-Abstract-More 1.07 -- Father Chrysostomos
RT-Send-CC: perl5-porters [...] perl.org
On Tue Nov 27 07:32:10 2012, sprout wrote: Show quoted text
> MooseX-Getopt 0.47
I'll take this one.
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 122b
Five more: Reflex 0.098 Test-Weaken 3.020000 Text-vCard 2.12 Verilog-Perl 3.317 XML-ExtOn 0.17 -- Father Chrysostomos
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 647b
DBI and XML-Rabbit are broken. Verilog-Perl is now fixed. Updated list: Aspect 1.03 Autocache 0.004 CatalystX-Controller-Sugar 0.0901 Class-AutoClass 1.54 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 Crypt-OpenPGP 1.06 DBI 1.622 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Hash-AutoHash-Args 1.15 libwww-perl 6.04 (patch submitted) MooseX-Getopt 0.47 Params-Validate-Checks 0.01 Parse-CPAN-Packages 2.37 Reflex 0.098 Socialtext-Resting 0.38 SQL-Abstract-More 1.07 Test-Inline 2.212 Test-Weaken 3.020000 Text-vCard 2.12 Tie-Hash-Indexed 0.05 WebService-Simple 0.18 XML-ExtOn 0.17 XML-Rabbit 0.1.1 XML-TinyXML 0.30 -- Father Chrysostomos
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Thu, 29 Nov 2012 13:01:00 +0100
To: perl5-porters [...] perl.org
From: ilmari [...] ilmari.org (Dagfinn Ilmari Mannsåker)
Download (untitled) / with headers
text/plain 431b
"Father Chrysostomos via RT" <perlbug-comment@perl.org> writes: Show quoted text
> MooseX-Getopt 0.47
I can't reproduce this failure with either threaded or unthreaded perl 5.17.6 on Linux x86_64. The purported cpantesters report linked from <https://rt.cpan.org/Ticket/Display.html?id=81418> is an unrelated failure on v5.13.11. -- "A disappointingly low fraction of the human race is, at any given time, on fire." - Stig Sandbeck Mathisen
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Thu, 29 Nov 2012 14:31:52 +0100
To: perl5-porters [...] perl.org
From: demerphq <demerphq [...] gmail.com>
Download (untitled) / with headers
text/plain 500b
On 29 November 2012 13:01, Dagfinn Ilmari Mannsåker <ilmari@ilmari.org> wrote: Show quoted text
> "Father Chrysostomos via RT" <perlbug-comment@perl.org> writes: >
>> MooseX-Getopt 0.47
> > I can't reproduce this failure with either threaded or unthreaded perl > 5.17.6 on Linux x86_64. The purported cpantesters report linked from > <https://rt.cpan.org/Ticket/Display.html?id=81418> is an unrelated > failure on v5.13.11.
Did you run it *many* times? Yves -- perl -Mre=debug -e "/just|another|perl|hacker/"
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Thu, 29 Nov 2012 15:26:40 +0100
To: perl5-porters [...] perl.org
From: ilmari [...] ilmari.org (Dagfinn Ilmari Mannsåker)
Download (untitled) / with headers
text/plain 860b
demerphq <demerphq@gmail.com> writes: Show quoted text
> On 29 November 2012 13:01, Dagfinn Ilmari Mannsåker <ilmari@ilmari.org> wrote:
>> "Father Chrysostomos via RT" <perlbug-comment@perl.org> writes: >>
>>> MooseX-Getopt 0.47
>> >> I can't reproduce this failure with either threaded or unthreaded perl >> 5.17.6 on Linux x86_64. The purported cpantesters report linked from >> <https://rt.cpan.org/Ticket/Display.html?id=81418> is an unrelated >> failure on v5.13.11.
> > Did you run it *many* times?
I've run it over a thousand times now (for about an hour, each run takes 2-3 seconds) without a single failure. Does anyone have an example of an actual failure? -- "I use RMS as a guide in the same way that a boat captain would use a lighthouse. It's good to know where it is, but you generally don't want to find yourself in the same spot." - Tollef Fog Heen
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Thu, 29 Nov 2012 16:04:39 +0100
To: perl5-porters [...] perl.org
From: demerphq <demerphq [...] gmail.com>
Download (untitled) / with headers
text/plain 863b
On 29 November 2012 15:26, Dagfinn Ilmari Mannsåker <ilmari@ilmari.org> wrote: Show quoted text
> demerphq <demerphq@gmail.com> writes: >
>> On 29 November 2012 13:01, Dagfinn Ilmari Mannsåker <ilmari@ilmari.org> wrote:
>>> "Father Chrysostomos via RT" <perlbug-comment@perl.org> writes: >>>
>>>> MooseX-Getopt 0.47
>>> >>> I can't reproduce this failure with either threaded or unthreaded perl >>> 5.17.6 on Linux x86_64. The purported cpantesters report linked from >>> <https://rt.cpan.org/Ticket/Display.html?id=81418> is an unrelated >>> failure on v5.13.11.
>> >> Did you run it *many* times?
> > I've run it over a thousand times now (for about an hour, each run takes > 2-3 seconds) without a single failure. > > Does anyone have an example of an actual failure?
Does it test anything from the environment? Yves -- perl -Mre=debug -e "/just|another|perl|hacker/"
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 1.5k
On Thu Nov 29 06:27:36 2012, ilmari wrote: Show quoted text
> demerphq <demerphq@gmail.com> writes: >
> > On 29 November 2012 13:01, Dagfinn Ilmari Manns�ker
> <ilmari@ilmari.org> wrote:
> >> "Father Chrysostomos via RT" <perlbug-comment@perl.org> writes: > >>
> >>> MooseX-Getopt 0.47
> >> > >> I can't reproduce this failure with either threaded or unthreaded
> perl
> >> 5.17.6 on Linux x86_64. The purported cpantesters report linked
> from
> >> <https://rt.cpan.org/Ticket/Display.html?id=81418> is an unrelated > >> failure on v5.13.11.
> > > > Did you run it *many* times?
> > I've run it over a thousand times now (for about an hour, each run > takes > 2-3 seconds) without a single failure. > > Does anyone have an example of an actual failure?
I only added it to the list because I saw the CPAN ticket. If it’s bogus, then we can ignore it. BTW, we have three additions, Search-Tools, YUI-Loader and Graph-Easy. The list is now: Aspect 1.03 (patched) Autocache 0.004 CatalystX-Controller-Sugar 0.0901 Class-AutoClass 1.54 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 Crypt-OpenPGP 1.06 DBI 1.622 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Graph-Easy 0.72 Hash-AutoHash-Args 1.15 libwww-perl 6.04 (patch submitted) MooseX-Getopt 0.47 (possibly bogus) Params-Validate-Checks 0.01 Parse-CPAN-Packages 2.37 Reflex 0.098 Search-Tools 0.84 Socialtext-Resting 0.38 SQL-Abstract-More 1.07 Test-Inline 2.212 Test-Weaken 3.020000 Text-vCard 2.12 Tie-Hash-Indexed 0.05 WebService-Simple 0.18 Yui-Loader 0.071 XML-ExtOn 0.17 XML-Rabbit 0.1.1 XML-TinyXML 0.30 -- Father Chrysostomos
RT-Send-CC: perl5-porters [...] perl.org
On Thu Nov 29 07:05:15 2012, demerphq wrote: Show quoted text
> On 29 November 2012 15:26, Dagfinn Ilmari Manns�ker > <ilmari@ilmari.org> wrote:
> > demerphq <demerphq@gmail.com> writes: > >
> >> On 29 November 2012 13:01, Dagfinn Ilmari Manns�ker
> <ilmari@ilmari.org> wrote:
> >>> "Father Chrysostomos via RT" <perlbug-comment@perl.org> writes: > >>>
> >>>> MooseX-Getopt 0.47
> >>> > >>> I can't reproduce this failure with either threaded or unthreaded
> perl
> >>> 5.17.6 on Linux x86_64. The purported cpantesters report linked
> from
> >>> <https://rt.cpan.org/Ticket/Display.html?id=81418> is an unrelated > >>> failure on v5.13.11.
> >> > >> Did you run it *many* times?
> > > > I've run it over a thousand times now (for about an hour, each run
> takes
> > 2-3 seconds) without a single failure. > > > > Does anyone have an example of an actual failure?
> > Does it test anything from the environment?
This module doesn’t use each() at all. The only uses of keys are insensitive to the order. So the CPAN ticket is mistaken. -- Father Chrysostomos
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 681b
On Thu Nov 29 04:03:16 2012, ilmari wrote: Show quoted text
> "Father Chrysostomos via RT" <perlbug-comment@perl.org> writes: >
> > MooseX-Getopt 0.47
> > I can't reproduce this failure with either threaded or unthreaded perl > 5.17.6 on Linux x86_64. The purported cpantesters report linked from > <https://rt.cpan.org/Ticket/Display.html?id=81418> is an unrelated > failure on v5.13.11.
That was my mistake; I misfiled this report in the chaos of the several failed reports I received that day. Sorry for the confusion! MooseX::Getopt 0.47 seems to be okay. However, MooseX::LazyRequire 0.08 is not: https://rt.cpan.org/Ticket/Display.html?id=81419 (which I will resolve by this weekend).
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 114b
Also Net-FastCGI-0.13 - https://rt.cpan.org/Ticket/Display.html?id=81543 -- Alexandr Ciornii, http://chorny.net
RT-Send-CC: perl5-porters [...] perl.org
Two more: TAP-Formatter-JUnit 0.09 Test-Module-Used 0.2.3 -- Father Chrysostomos
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 192b
Five more: Locale-Maketext-Lexicon 0.91 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-AttributeHelpers 0.23 Net-Google-FederatedLogin 0.7.1 Transmission-Client 0.0603 -- Father Chrysostomos
CC: perl5-porters [...] perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Fri, 30 Nov 2012 10:31:13 +0100
To: perlbug-comment [...] perl.org
From: demerphq <demerphq [...] gmail.com>
Download (untitled) / with headers
text/plain 361b
On 30 November 2012 06:32, Father Chrysostomos via RT <perlbug-comment@perl.org> wrote: Show quoted text
> Five more: > > Locale-Maketext-Lexicon 0.91 > Mojolicious-Plugin-ShareHelpers 0.52 > MooseX-AttributeHelpers 0.23 > Net-Google-FederatedLogin 0.7.1 > Transmission-Client 0.0603
How are you identifying these FC? Yves -- perl -Mre=debug -e "/just|another|perl|hacker/"
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 507b
On Fri Nov 30 01:31:37 2012, demerphq wrote: Show quoted text
> On 30 November 2012 06:32, Father Chrysostomos via RT > <perlbug-comment@perl.org> wrote:
> > Five more: > > > > Locale-Maketext-Lexicon 0.91 > > Mojolicious-Plugin-ShareHelpers 0.52 > > MooseX-AttributeHelpers 0.23 > > Net-Google-FederatedLogin 0.7.1 > > Transmission-Client 0.0603
> > How are you identifying these FC?
I’m just watching the CPAN tickets appear when Andreas files them. :-) LWP was the only one I found myself. -- Father Chrysostomos
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 189b
Seven more: Net-HTTP-API 0.14 Net-ISC-DHCPd 0.14 package-watchdog 0.09 PDF-API2 2.019 PHP-HTTPBuildQuery 0.05 Pod-WSDL 0.061 POE-Component-Client-BigBrother 1.00 -- Father Chrysostomos
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 985b
SQL-Abstract-More and Test-Weaken are fixed. Aspect 1.03 (patched) Autocache 0.004 CatalystX-Controller-Sugar 0.0901 Class-AutoClass 1.54 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 Crypt-OpenPGP 1.06 DBI 1.622 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Graph-Easy 0.72 Hash-AutoHash-Args 1.15 libwww-perl 6.04 (patch submitted) Locale-Maketext-Lexicon 0.91 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-AttributeHelpers 0.23 Net-FastCGI 0.13 Net-Google-FederatedLogin 0.7.1 Net-HTTP-API 0.14 Net-ISC-DHCPd 0.14 package-watchdog 0.09 Params-Validate-Checks 0.01 Parse-CPAN-Packages 2.37 PDF-API2 2.019 PHP-HTTPBuildQuery 0.05 Pod-WSDL 0.061 POE-Component-Client-BigBrother 1.00 Reflex 0.098 Search-Tools 0.84 Socialtext-Resting 0.38 TAP-Formatter-JUnit 0.09 Test-Inline 2.212 Test-Module-Used 0.2.3 Text-vCard 2.12 Tie-Hash-Indexed 0.05 Transmission-Client 0.0603 WebService-Simple 0.18 Yui-Loader 0.071 XML-ExtOn 0.17 XML-Rabbit 0.1.1 XML-TinyXML 0.30 -- Father Chrysostomos
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Sat, 01 Dec 2012 03:51:24 +0100
To: <perlbug-comment [...] perl.org>
From: Andreas Koenig <andreas.koenig.7os6VVqR [...] franz.ak.mind.de>
Download (untitled) / with headers
text/plain 1015b
"Father Chrysostomos via RT" <perlbug-comment@perl.org> writes: Show quoted text
> On Fri Nov 30 01:31:37 2012, demerphq wrote:
>> On 30 November 2012 06:32, Father Chrysostomos via RT >> <perlbug-comment@perl.org> wrote:
>> > Five more: >> > >> > Locale-Maketext-Lexicon 0.91 >> > Mojolicious-Plugin-ShareHelpers 0.52 >> > MooseX-AttributeHelpers 0.23 >> > Net-Google-FederatedLogin 0.7.1 >> > Transmission-Client 0.0603
>> >> How are you identifying these FC?
> > I’m just watching the CPAN tickets appear when Andreas files them. :-)
:) Thanks for doing that, Here are three more from github: Net-HTTP-Spore-0.04 https://github.com/franckcuny/net-http-spore/issues/19 MooseX-Attribute-Deflator-2.2.1 https://github.com/monken/p5-moosex-attribute-deflator/issues/4 RDF-NS-20120917 https://github.com/nichtich/RDF-NS/issues/2 Show quoted text
> LWP was the only one I found myself.
and I'm mining the data that my smokers generate. There's still a bit more to wade through. -- andreas
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 100b
Net-Bot-IRC-NumericCodes 0.05 PITA-XML 0.51 Su 0.100 Tie-FieldVals 0.6202 -- Father Chrysostomos
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 171b
Catalyst-Runtime 5.90018 Class-Trait 0.31 And that puts us up to 50, unless I miscounted. Does that mean that something needs to be rethought? -- Father Chrysostomos
CC: perl5-porters [...] perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Sat, 01 Dec 2012 00:55:15 -0700
From: Curtis Jewell <perl [...] csjewell.fastmail.us>
Download (untitled) / with headers
text/plain 605b
On Fri, Nov 30, 2012, at 22:32, Father Chrysostomos via RT wrote: Show quoted text
> Catalyst-Runtime 5.90018 > Class-Trait 0.31 > > And that puts us up to 50, unless I miscounted. > > Does that mean that something needs to be rethought?
If this was something we hadn't warned about for 5+ years might happen, yes. Since we have, then no. -- Curtis Jewell csjewell@cpan.org http://csjewell.dreamwidth.org/ perl@csjewell.fastmail.us http://csjewell.comyr.org/perl/ "Your random numbers are not that random" -- perl-5.10.1.tar.gz/util.c Strawberry Perl for Windows betas: http://strawberryperl.com/beta/
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 246b
API-Plesk 2.01 App-Hachero 0.13 App-OpenVZ-BCWatch 0.03 Bio-NEXUS 0.78 Bio-SDRS 0.08 Brannigan 0.9 Business-RO-CNP 0.03 CatalystX-Declare 0.015 CGI-Alert 2.05 CGI-Application-Plugin-Session 1.03 CGI-Cookie-Splitter 0.02 -- Father Chrysostomos
CC: perl5-porters [...] perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Sat, 1 Dec 2012 18:37:27 +0100
To: Curtis Jewell <perl [...] csjewell.fastmail.us>
From: demerphq <demerphq [...] gmail.com>
Download (untitled) / with headers
text/plain 769b
On 1 December 2012 08:55, Curtis Jewell <perl@csjewell.fastmail.us> wrote: Show quoted text
> > > On Fri, Nov 30, 2012, at 22:32, Father Chrysostomos via RT wrote:
>> Catalyst-Runtime 5.90018 >> Class-Trait 0.31 >> >> And that puts us up to 50, unless I miscounted. >> >> Does that mean that something needs to be rethought?
> > If this was something we hadn't warned about for 5+ years might happen, > yes. > Since we have, then no.
I agree. But I also think we need evangalists like yourself to blog and tweet and post like crazy about this and get people to fix their stuff ASAP. I posted to Perlmonks, but I suspect you have a wider audience than I do, and can probably shame people into activity better than I can. ;-) Yves -- perl -Mre=debug -e "/just|another|perl|hacker/"
CC: Curtis Jewell <perl [...] csjewell.fastmail.us>, perl5-porters [...] perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Sat, 01 Dec 2012 22:42:24 +0100
To: demerphq <demerphq [...] gmail.com>
From: Andreas Koenig <andreas.koenig.7os6VVqR [...] franz.ak.mind.de>
Download (untitled) / with headers
text/plain 1.2k
demerphq <demerphq@gmail.com> writes: Show quoted text
> On 1 December 2012 08:55, Curtis Jewell <perl@csjewell.fastmail.us> wrote:
>> >> >> On Fri, Nov 30, 2012, at 22:32, Father Chrysostomos via RT wrote:
>>> Catalyst-Runtime 5.90018 >>> Class-Trait 0.31 >>> >>> And that puts us up to 50, unless I miscounted. >>> >>> Does that mean that something needs to be rethought?
>> >> If this was something we hadn't warned about for 5+ years might happen, >> yes. >> Since we have, then no.
> > I agree. But I also think we need evangalists like yourself to blog > and tweet and post like crazy about this and get people to fix their > stuff ASAP. > > I posted to Perlmonks, but I suspect you have a wider audience than I > do, and can probably shame people into activity better than I can. ;-)
Evangelism would be easier if there were a place to go to find the documentation. Where is the FAQ that answers all questions? I don't mind if the number of links is >1 but I'd wish to point them to a place where they can find *all* links and where they can post *any* question they have. E.g. aIs there a way to switch perl back to the 5.17.5 behaviour? You posted on Perlmonks? But did you or anybody else follow up on their questions? Maybe I'm missing something. Don't be shy to repeat the answers you already gave from time to time. -- andreas
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Sat, 1 Dec 2012 23:58:03 -0500
To: perl5-porters [...] perl.org
From: Ricardo Signes <perl.p5p [...] rjbs.manxome.org>
Download (untitled) / with headers
text/plain 586b
* Father Chrysostomos via RT <perlbug-comment@perl.org> [2012-12-01T00:32:22] Show quoted text
> And that puts us up to 50, unless I miscounted. > > Does that mean that something needs to be rethought?
So far, I think that (as is stated elsewhere in this thread) the thing that must be done is publication. I will try to get the word out more widely, both personally and by leaning on some people who can help do so. This change is something we need to do, and I don't think putting it off is going to be a win. It will still be onerous next year, and without much benefit to the delay. -- rjbs
Download signature.asc
application/pgp-signature 490b

Message body not shown because it is not plain text.

CC: Curtis Jewell <perl [...] csjewell.fastmail.us>, perl5-porters [...] perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Sun, 2 Dec 2012 10:36:16 +0100
To: Andreas Koenig <andreas.koenig.7os6VVqR [...] franz.ak.mind.de>
From: demerphq <demerphq [...] gmail.com>
Download (untitled) / with headers
text/plain 2.4k
On 1 December 2012 22:42, Andreas Koenig <andreas.koenig.7os6VVqR@franz.ak.mind.de> wrote: Show quoted text
> demerphq <demerphq@gmail.com> writes: >
>> On 1 December 2012 08:55, Curtis Jewell <perl@csjewell.fastmail.us> wrote:
>>> >>> >>> On Fri, Nov 30, 2012, at 22:32, Father Chrysostomos via RT wrote:
>>>> Catalyst-Runtime 5.90018 >>>> Class-Trait 0.31 >>>> >>>> And that puts us up to 50, unless I miscounted. >>>> >>>> Does that mean that something needs to be rethought?
>>> >>> If this was something we hadn't warned about for 5+ years might happen, >>> yes. >>> Since we have, then no.
>> >> I agree. But I also think we need evangalists like yourself to blog >> and tweet and post like crazy about this and get people to fix their >> stuff ASAP. >> >> I posted to Perlmonks, but I suspect you have a wider audience than I >> do, and can probably shame people into activity better than I can. ;-)
> > Evangelism would be easier if there were a place to go to find the > documentation. Where is the FAQ that answers all questions? I don't mind > if the number of links is >1 but I'd wish to point them to a place where > they can find *all* links and where they can post *any* question they > have. E.g. aIs there a way to switch perl back to the 5.17.5 behaviour?
Ok, this is a good point. One can disable the randomness by setting then environment var PERL_HASH_SEED to a given hash seed (in hex). But perl will likely be built with a different hash function anyway. Currently even if you switch back to the old function (which we do support as a build option) and set the PERL_HASH_SEED to 0 you still wont get exactly the same behavior as before as the way the hash seed is initialized has been slightly changed to fix some flaws in the functions behavior. I will look at adding a build option that enables the exact same behavior as old. However it will be a build time option and one that people are recommended not to use. Show quoted text
> You posted on Perlmonks? But did you or anybody else follow up on their > questions?
Yes actually. There was a detailed list of links to relevent documents talking about this. http://perlmonks.org/?node_id=1005122 Any unanswered questions there are new to me and I will get to in due course. Show quoted text
> Maybe I'm missing something. Don't be shy to repeat the answers you > already gave from time to time.
I did a reasonable perldelta explaining the changes. Anyway, clearly a summary doc is needed. I am short of tuits right now however. cheers, Yves -- perl -Mre=debug -e "/just|another|perl|hacker/"
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 753b
Many more: Bio-Phylo Brickyard 1.111750 CGI-Application-Plugin-Stream 2.10 CGI-FormBuilder 3.08 Class-Generate 1.11 Class-Injection 1.08 cPanel-SyncUtil 0.7 Data-Dump-Partial 0.03 Data-Dump-XML 1.19 Data-PowerSet-Hash 0.02 Data-Visitor (https://github.com/nothingmuch/data-visitor/pull/2) DBIx-Class 0.08204 DBIx-ObjectMapper 0.3013 DBIx-Simple-OO 0.02 DBIx-Skinny 0.0742 DJabberd 0.85 Getopt-Euclid 0.3.7 Gtk2-Ex-WidgetBits 48 Hash-SafeKeys 0.02 HTML-FillInForm 2.1 HTML-StickyQuery-DoCoMoGUID 0.03 HTML-Transmorgify 0.09 Internals-DumpArenas 0.12 Lingua-Boolean (patched) MojoX-Dispatcher-Qooxdoo-Jsonrpc 0.88 Net-MQTT Test-HTTP-Response 0.04 Ubic XML-Hash-LX 0.0603 Data::Visitor is broken, but its tests don’t show it. -- Father Chrysostomos
CC: Curtis Jewell <perl [...] csjewell.fastmail.us>, perl5-porters [...] perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Mon, 3 Dec 2012 12:13:06 +0100
To: Andreas Koenig <andreas.koenig.7os6VVqR [...] franz.ak.mind.de>
From: demerphq <demerphq [...] gmail.com>
Download (untitled) / with headers
text/plain 2.8k
On 2 December 2012 10:36, demerphq <demerphq@gmail.com> wrote: Show quoted text
> On 1 December 2012 22:42, Andreas Koenig > <andreas.koenig.7os6VVqR@franz.ak.mind.de> wrote:
>> demerphq <demerphq@gmail.com> writes: >>
>>> On 1 December 2012 08:55, Curtis Jewell <perl@csjewell.fastmail.us> wrote:
>>>> >>>> >>>> On Fri, Nov 30, 2012, at 22:32, Father Chrysostomos via RT wrote:
>>>>> Catalyst-Runtime 5.90018 >>>>> Class-Trait 0.31 >>>>> >>>>> And that puts us up to 50, unless I miscounted. >>>>> >>>>> Does that mean that something needs to be rethought?
>>>> >>>> If this was something we hadn't warned about for 5+ years might happen, >>>> yes. >>>> Since we have, then no.
>>> >>> I agree. But I also think we need evangalists like yourself to blog >>> and tweet and post like crazy about this and get people to fix their >>> stuff ASAP. >>> >>> I posted to Perlmonks, but I suspect you have a wider audience than I >>> do, and can probably shame people into activity better than I can. ;-)
>> >> Evangelism would be easier if there were a place to go to find the >> documentation. Where is the FAQ that answers all questions? I don't mind >> if the number of links is >1 but I'd wish to point them to a place where >> they can find *all* links and where they can post *any* question they >> have. E.g. aIs there a way to switch perl back to the 5.17.5 behaviour?
> > Ok, this is a good point. > > One can disable the randomness by setting then environment var > PERL_HASH_SEED to a given hash seed (in hex). But perl will likely be > built with a different hash function anyway. > > Currently even if you switch back to the old function (which we do > support as a build option) and set the PERL_HASH_SEED to 0 you still > wont get exactly the same behavior as before as the way the hash seed > is initialized has been slightly changed to fix some flaws in the > functions behavior. I will look at adding a build option that enables > the exact same behavior as old. However it will be a build time option > and one that people are recommended not to use.
Done with commit 8c9e24c7f6088cb5fe0779c2c11c1fb4ca8ae693 Author: Yves Orton <demerphq@gmail.com> Date: Mon Dec 3 11:49:00 2012 +0100 Make it possible to simulate old style one-at-a-time hashing With a 0 seed and ONE_AT_A_TIME_OLD hashing enabled one can simulate older perls (with the exception there is no rehashing at play). This includes a modest tweak to reduce ops per character by comparing the string pointer to the end of the string, instead of maintaining a position counter. This /still/ wont /exactly/ match previous behavior as we dont support rehashing anymore. But this will get as close as is reasonable, and rehashing actually makes older perls /selectively/ random, so newer perls with a fixed hash seed will be more stable and not less than old ones. Yves -- perl -Mre=debug -e "/just|another|perl|hacker/"
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 534b
On Fri Nov 30 21:32:22 2012, sprout wrote: Show quoted text
> And that puts us up to 50, unless I miscounted. > > Does that mean that something needs to be rethought?
I wouldn't worry about that until a good number of the suspected dists have actually been looked at. Parse::CPAN::Packages, which i still need to look at, for example, has been flapping for a long while due to some unpacking issues even before this. I wouldn't be surprised if it appeared in your net because of that. I also wouldn't be surprised if others had similar issues.
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 2.2k
XML-Rabbit, MojoX-Dispatcher-Qooxdoo-Jsonrpc, Data-Dump-Partial, Ubic, and Bio-Phylo are resolved. autobox-JSON and Gtk2 1.245 and broken. Here is an updated list: API-Plesk 2.01 App-Hachero 0.13 App-OpenVZ-BCWatch 0.03 Aspect 1.03 (patched) autobox-JSON 0.0003 Autocache 0.004 Bio-NEXUS 0.78 Bio-SDRS 0.08 Brannigan 0.9 Brickyard 1.111750 Business-RO-CNP 0.03 Catalyst-Runtime 5.90018 CatalystX-Controller-Sugar 0.0901 CatalystX-Declare 0.015 CGI-Alert 2.05 CGI-Application-Plugin-Session 1.03 CGI-Application-Plugin-Stream 2.10 CGI-Cookie-Splitter 0.02 CGI-FormBuilder 3.08 Class-AutoClass 1.54 Class-Generate 1.11 Class-Injection 1.08 Class-Trait 0.31 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 cPanel-SyncUtil 0.7 Crypt-OpenPGP 1.06 Data-Dump-XML 1.19 Data-PowerSet-Hash 0.02 Data-Visitor (https://github.com/nothingmuch/data-visitor/pull/2) DBI 1.622 DBIx-Class 0.08204 DBIx-ObjectMapper 0.3013 DBIx-Simple-OO 0.02 DBIx-Skinny 0.0742 DJabberd 0.85 FormValidator-LazyWay 0.19 Getopt-Euclid 0.3.7 Google-AJAX-Library 0.022 Graph-Easy 0.72 Gtk2 1.245 Gtk2-Ex-WidgetBits 48 Hash-AutoHash-Args 1.15 (patched) Hash-SafeKeys 0.02 HTML-FillInForm 2.1 HTML-StickyQuery-DoCoMoGUID 0.03 HTML-Transmorgify 0.09 Internals-DumpArenas 0.12 libwww-perl 6.04 (patch submitted) Lingua-Boolean (patched) Locale-Maketext-Lexicon 0.91 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-Attribute-Deflator-2.2.1 https://github.com/monken/p5-moosex-attribute-deflator/issues/4 MooseX-AttributeHelpers 0.23 Net-Bot-IRC-NumericCodes 0.05 Net-FastCGI 0.13 Net-Google-FederatedLogin 0.7.1 Net-HTTP-API 0.14 Net-HTTP-Spore-0.04 https://github.com/franckcuny/net-http-spore/issues/19 Net-ISC-DHCPd 0.14 Net-MQTT package-watchdog 0.09 Params-Validate-Checks 0.01 Parse-CPAN-Packages 2.37 PDF-API2 2.019 PHP-HTTPBuildQuery 0.05 PITA-XML 0.51 Pod-WSDL 0.061 POE-Component-Client-BigBrother 1.00 RDF-NS-20120917 https://github.com/nichtich/RDF-NS/issues/2 Reflex 0.098 Search-Tools 0.84 Socialtext-Resting 0.38 Su 0.100 TAP-Formatter-JUnit 0.09 Test-HTTP-Response 0.04 Test-Inline 2.212 Test-Module-Used 0.2.3 Text-vCard 2.12 Tie-FieldVals 0.6202 Tie-Hash-Indexed 0.05 Transmission-Client 0.0603 WebService-Simple 0.18 Yui-Loader 0.071 XML-ExtOn 0.17 XML-Hash-LX 0.0603 XML-TinyXML 0.30 -- Father Chrysostomos
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Mon, 03 Dec 2012 17:06:18 +0000
To: perlbug-comment [...] perl.org
From: hv [...] crypt.org
"Father Chrysostomos via RT" <perlbug-comment@perl.org> wrote: :Here is an updated list: I took a look at a few of these today; 3 of the 5 I looked at just need a patch to a single test (Aspect, Convert-yEnc, Class-AutoClass); one appears fundamentally broken (Autocache); and one needs more work (Crypt-OpenPGP). (I should note also that despite the alarming size of the list of failing modules on this ticket, I built some 50 dependencies along the way to testing the 5 below, all but one of which were fine.) Aspect 1.03 (patched) --------------------- (What does "patched" mean? I assume it doesn't mean "fixed", since it is still on the list.) One method returns keys in hash order, one test relies on that order. Patch below (t/11_pointcut_call.t). Convert-yEnc 1.04 ----------------- One test appears to rely on hash order; I don't fully understand what the module is doing, but the patch below to t/RC.t is enough to make the test pass. Class-AutoClass 1.54 -------------------- This module passed all tests 10 times in a row for me; however it depends on Hash-AutoHash-Args which fails a test in v1.15 apparently due to hash order dependency: # Failed test 'constructor form 4' # at t/autoargs.098.docs.t line 125. Not patched, I can't tell how fundamental this is to the module. Autocache 0.004 --------------- This module seems fundamentally broken - Autocache::configure() relies on keys() somehow magically to return strategies in dependency-resolving order. Renaming a strategy in a test config shows the problem on older perl, eg s/cbc/cba/g in t/005_cost.t.conf fails for me on 5.16.1. Crypt-OpenPGP 1.06 ------------------ I see 4 suspicious uses of keys/values/each in the shipped modules: lib/Crypt/OpenPGP.pm init(): lib/Crypt/OpenPGP/SessionKey.pm save(): lib/Crypt/OpenPGP/SessionKey.pm display(): lib/Crypt/OpenPGP/Armour.pm armour(): I think the second at least is a significant bug, but I can't see that it is getting exercised by the testsuite at all. My guess is that there is a similar problem in one of the dependency modules that causes the t/11-encrypt.t failures. Needs further investigation from someone that has more time and/or skill than me to give to it. Hugo Show quoted text
>>> patch for Aspect 1.03
--- t/11_pointcut_call.t.old 2012-10-31 03:05:46.000000000 +0000 +++ t/11_pointcut_call.t 2012-12-03 09:38:24.000000000 +0000 @@ -94,7 +94,7 @@ # Does match_all find only the second method? is_deeply( - [ $not_call_and_call->match_all ], + [ sort $not_call_and_call->match_all ], [ 'One::two' ], '->match_all works as expected', ); Show quoted text
>>> patch for Convert-yEnc 1.04
--- t/RC.t.old 2012-12-03 10:35:51.000000000 +0000 +++ t/RC.t 2012-12-03 10:36:02.000000000 +0000 @@ -218,8 +218,8 @@ $rc->save($full); ok(-s $full, "Save: save to named file"); - my @full = ReadLines("$full"); - my @gold = ReadLines("$Dir/gold"); + my @full = sort { $a cmp $b } ReadLines("$full"); + my @gold = sort { $a cmp $b } ReadLines("$Dir/gold"); ok(eq_array(\@full, \@gold), "Save: verify saved file contents"); }
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Tue, 4 Dec 2012 08:02:16 +0100
To: perl5-porters [...] perl.org
From: "A. Pagaltzis" <pagaltzis [...] gmx.de>
Download (untitled) / with headers
text/plain 544b
* demerphq <demerphq@gmail.com> [2012-12-03 12:15]: Show quoted text
> commit 8c9e24c7f6088cb5fe0779c2c11c1fb4ca8ae693 > Author: Yves Orton <demerphq@gmail.com> > Date: Mon Dec 3 11:49:00 2012 +0100 > > Make it possible to simulate old style one-at-a-time hashing > > With a 0 seed and ONE_AT_A_TIME_OLD hashing enabled one can simulate > older perls (with the exception there is no rehashing at play).
The docs should point out clearly to would-be users of this feature that they are purposely asking for a perl with a known DoS vulnerability.
CC: perl5-porters [...] perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Tue, 04 Dec 2012 08:48:11 +0000
To: perlbug-comment [...] perl.org
From: hv [...] crypt.org
Download (untitled) / with headers
text/plain 1.3k
Earlier I wrote: :Crypt-OpenPGP 1.06 :------------------ :I see 4 suspicious uses of keys/values/each in the shipped modules: :lib/Crypt/OpenPGP.pm init(): :lib/Crypt/OpenPGP/SessionKey.pm save(): :lib/Crypt/OpenPGP/SessionKey.pm display(): :lib/Crypt/OpenPGP/Armour.pm armour(): : :I think the second at least is a significant bug, but I can't see that :it is getting exercised by the testsuite at all. My guess is that there :is a similar problem in one of the dependency modules that causes the :t/11-encrypt.t failures. : :Needs further investigation from someone that has more time and/or skill :than me to give to it. Ah, I hadn't realised the testsuite was swallowing my diagnostics. The patch below is enough to make the tests pass here. I'm not sure, but I suspect the hash keys are only ever 'a' and 'b'; if there's ever a case they might not be, the patch below is no more likely to be correct than an explicit qw{a b} list. Hugo --- lib/Crypt/OpenPGP/SessionKey.pm.old 2010-12-06 21:48:53.000000000 +0000 +++ lib/Crypt/OpenPGP/SessionKey.pm 2012-12-04 09:35:50.000000000 +0000 @@ -59,8 +59,8 @@ $buf->put_bytes($key->{key_id}, 8); $buf->put_int8($key->{pk_alg}); my $c = $key->{C}; - for my $mp (values %$c) { - $buf->put_mp_int($mp); + for my $mpk (sort keys %$c) { + $buf->put_mp_int($c->{$mpk}); } $buf->bytes; }
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 2.1k
CGI-Alert, Getopt-Euclid and Search-Tools are resolved. Collection, InterMine-Item and MooseX-Storage are broken. New list: API-Plesk 2.01 App-Hachero 0.13 App-OpenVZ-BCWatch 0.03 Aspect 1.03 (patched) autobox-JSON 0.0003 Autocache 0.004 Bio-NEXUS 0.78 Bio-SDRS 0.08 Brannigan 0.9 Brickyard 1.111750 Business-RO-CNP 0.03 Catalyst-Runtime 5.90018 CatalystX-Controller-Sugar 0.0901 CatalystX-Declare 0.015 CGI-Application-Plugin-Session 1.03 CGI-Application-Plugin-Stream 2.10 CGI-Cookie-Splitter 0.02 CGI-FormBuilder 3.08 Class-AutoClass 1.54 Class-Generate 1.11 Class-Injection 1.08 Class-Trait 0.31 Collection 0.55 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 cPanel-SyncUtil 0.7 Crypt-OpenPGP 1.06 Data-Dump-XML 1.19 Data-PowerSet-Hash 0.02 Data-Visitor (https://github.com/nothingmuch/data-visitor/pull/2) DBI 1.622 DBIx-Class 0.08204 DBIx-ObjectMapper 0.3013 DBIx-Simple-OO 0.02 DBIx-Skinny 0.0742 DJabberd 0.85 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Graph-Easy 0.72 Gtk2 1.245 Gtk2-Ex-WidgetBits 48 Hash-AutoHash-Args 1.15 (patched) Hash-SafeKeys 0.02 HTML-FillInForm 2.1 HTML-StickyQuery-DoCoMoGUID 0.03 HTML-Transmorgify 0.09 InterMine-Item 0.98 Internals-DumpArenas 0.12 libwww-perl 6.04 (patch submitted) Lingua-Boolean (patched) Locale-Maketext-Lexicon 0.91 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-Attribute-Deflator-2.2.1 https://github.com/monken/p5-moosex-attribute-deflator/issues/4 MooseX-AttributeHelpers 0.23 MooseX-Storage Net-Bot-IRC-NumericCodes 0.05 Net-FastCGI 0.13 Net-Google-FederatedLogin 0.7.1 Net-HTTP-API 0.14 Net-HTTP-Spore-0.04 https://github.com/franckcuny/net-http-spore/issues/19 Net-ISC-DHCPd 0.14 Net-MQTT package-watchdog 0.09 Params-Validate-Checks 0.01 Parse-CPAN-Packages 2.37 PDF-API2 2.019 PHP-HTTPBuildQuery 0.05 PITA-XML 0.51 Pod-WSDL 0.061 POE-Component-Client-BigBrother 1.00 RDF-NS-20120917 https://github.com/nichtich/RDF-NS/issues/2 Reflex 0.098 Socialtext-Resting 0.38 Su 0.100 TAP-Formatter-JUnit 0.09 Test-HTTP-Response 0.04 Test-Inline 2.212 Test-Module-Used 0.2.3 Text-vCard 2.12 Tie-FieldVals 0.6202 Tie-Hash-Indexed 0.05 Transmission-Client 0.0603 WebService-Simple 0.18 Yui-Loader 0.071 XML-ExtOn 0.17 XML-Hash-LX 0.0603 XML-TinyXML 0.30 -- Father Chrysostomos
CC: perl5-porters [...] perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Tue, 4 Dec 2012 16:53:50 +0100 (CET)
To: perlbug-comment [...] perl.org
From: Sébastien Aperghis-Tramoni <sebastien [...] aperghis.net>
Download (untitled) / with headers
text/plain 313b
Show quoted text
> POE-Component-Client-BigBrother 1.00
I think you can safely remove this module of mine from your list. The tests seem a bit fragile and regularly fail since two years » http://matrix.cpantesters.org/?dist=POE-Component-Client-BigBrother-1.00 -- Sébastien Aperghis-Tramoni Close the world, txEn eht nepO.
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 2.1k
Catalyst-Runtime, MooseX-Storage and Locale-Maketext-Lexicon are resolved. POE-Component-Client-BigBrother I’m told is unrelated. Pod-POM is broken. API-Plesk 2.01 App-Hachero 0.13 App-OpenVZ-BCWatch 0.03 Aspect 1.03 (patched) autobox-JSON 0.0003 Autocache 0.004 Bio-NEXUS 0.78 Bio-SDRS 0.08 Brannigan 0.9 Brickyard 1.111750 Business-RO-CNP 0.03 CatalystX-Controller-Sugar 0.0901 CatalystX-Declare 0.015 CGI-Application-Plugin-Session 1.03 CGI-Application-Plugin-Stream 2.10 CGI-Cookie-Splitter 0.02 CGI-FormBuilder 3.08 Class-AutoClass 1.54 Class-Generate 1.11 Class-Injection 1.08 Class-Trait 0.31 Collection 0.55 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 cPanel-SyncUtil 0.7 Crypt-OpenPGP 1.06 Data-Dump-XML 1.19 Data-PowerSet-Hash 0.02 Data-Visitor (https://github.com/nothingmuch/data-visitor/pull/2) DBI 1.622 DBIx-Class 0.08204 DBIx-ObjectMapper 0.3013 DBIx-Simple-OO 0.02 DBIx-Skinny 0.0742 DJabberd 0.85 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Graph-Easy 0.72 Gtk2 1.245 Gtk2-Ex-WidgetBits 48 Hash-AutoHash-Args 1.15 (patched) Hash-SafeKeys 0.02 HTML-FillInForm 2.1 HTML-StickyQuery-DoCoMoGUID 0.03 HTML-Transmorgify 0.09 InterMine-Item 0.98 Internals-DumpArenas 0.12 libwww-perl 6.04 (patch submitted) Lingua-Boolean (patched) Mojolicious-Plugin-ShareHelpers 0.52 MooseX-Attribute-Deflator-2.2.1 https://github.com/monken/p5-moosex-attribute-deflator/issues/4 MooseX-AttributeHelpers 0.23 Net-Bot-IRC-NumericCodes 0.05 Net-FastCGI 0.13 Net-Google-FederatedLogin 0.7.1 Net-HTTP-API 0.14 Net-HTTP-Spore-0.04 https://github.com/franckcuny/net-http-spore/issues/19 Net-ISC-DHCPd 0.14 Net-MQTT package-watchdog 0.09 Params-Validate-Checks 0.01 Parse-CPAN-Packages 2.37 PDF-API2 2.019 PHP-HTTPBuildQuery 0.05 PITA-XML 0.51 Pod-POM 0.27 Pod-WSDL 0.061 RDF-NS-20120917 https://github.com/nichtich/RDF-NS/issues/2 Reflex 0.098 Socialtext-Resting 0.38 Su 0.100 TAP-Formatter-JUnit 0.09 Test-HTTP-Response 0.04 Test-Inline 2.212 Test-Module-Used 0.2.3 Text-vCard 2.12 Tie-FieldVals 0.6202 Tie-Hash-Indexed 0.05 Transmission-Client 0.0603 WebService-Simple 0.18 Yui-Loader 0.071 XML-ExtOn 0.17 XML-Hash-LX 0.0603 XML-TinyXML 0.30 -- Father Chrysostomos
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 113b
Two additions: MooseX-MetaDescription 0.05 MooseX-Traits-Attribute-MergeHashRef 1.002 -- Father Chrysostomos
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 129b
Fore mour: List-Cycle 1.00 MooseX-AttributeCloner 0.25 Spreadsheet-WriteExcelXML 0.13 SWISH-Prog 0.65 -- Father Chrysostomos
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 2.3k
Four more: Data-ModeMerge 0.28 HTML-TagCloud 0.37 I18N-Handle 0.051 Role-REST-Client 0.13 Dist-Zilla-Role-Stash-Plugins and SWISH-Prog have been fixed. The list is now: API-Plesk 2.01 App-Hachero 0.13 App-OpenVZ-BCWatch 0.03 Aspect 1.03 (patched) autobox-JSON 0.0003 Autocache 0.004 Bio-NEXUS 0.78 Bio-SDRS 0.08 Brannigan 0.9 Brickyard 1.111750 Business-RO-CNP 0.03 CatalystX-Controller-Sugar 0.0901 CatalystX-Declare 0.015 CGI-Application-Plugin-Session 1.03 CGI-Application-Plugin-Stream 2.10 CGI-Cookie-Splitter 0.02 CGI-FormBuilder 3.08 Class-AutoClass 1.54 Class-Generate 1.11 Class-Injection 1.08 Class-Trait 0.31 Collection 0.55 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 cPanel-SyncUtil 0.7 Crypt-OpenPGP 1.06 Data-Dump-XML 1.19 Data-ModeMerge 0.28 Data-PowerSet-Hash 0.02 Data-Visitor (https://github.com/nothingmuch/data-visitor/pull/2) DBI 1.622 DBIx-Class 0.08204 DBIx-ObjectMapper 0.3013 DBIx-Simple-OO 0.02 DBIx-Skinny 0.0742 DJabberd 0.85 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Graph-Easy 0.72 Gtk2 1.245 Gtk2-Ex-WidgetBits 48 Hash-AutoHash-Args 1.15 (patched) Hash-SafeKeys 0.02 HTML-FillInForm 2.1 HTML-StickyQuery-DoCoMoGUID 0.03 HTML-TagCloud 0.37 HTML-Transmorgify 0.09 I18N-Handle 0.051 InterMine-Item 0.98 Internals-DumpArenas 0.12 libwww-perl 6.04 (patch submitted) Lingua-Boolean (patched) List-Cycle 1.00 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-AttributeCloner 0.25 MooseX-Attribute-Deflator-2.2.1 https://github.com/monken/p5-moosex-attribute-deflator/issues/4 MooseX-AttributeHelpers 0.23 MooseX-MetaDescription 0.05 MooseX-Traits-Attribute-MergeHashRef 1.002 Net-Bot-IRC-NumericCodes 0.05 Net-FastCGI 0.13 Net-Google-FederatedLogin 0.7.1 Net-HTTP-API 0.14 Net-HTTP-Spore-0.04 https://github.com/franckcuny/net-http-spore/issues/19 Net-ISC-DHCPd 0.14 Net-MQTT package-watchdog 0.09 Params-Validate-Checks 0.01 Parse-CPAN-Packages 2.37 PDF-API2 2.019 PHP-HTTPBuildQuery 0.05 PITA-XML 0.51 Pod-POM 0.27 Pod-WSDL 0.061 RDF-NS-20120917 https://github.com/nichtich/RDF-NS/issues/2 Reflex 0.098 Role-REST-Client 0.13 Socialtext-Resting 0.38 Spreadsheet-WriteExcelXML 0.13 Su 0.100 SWISH-Prog 0.65 TAP-Formatter-JUnit 0.09 Test-HTTP-Response 0.04 Test-Inline 2.212 Test-Module-Used 0.2.3 Text-vCard 2.12 Tie-FieldVals 0.6202 Tie-Hash-Indexed 0.05 Transmission-Client 0.0603 WebService-Simple 0.18 Yui-Loader 0.071 XML-ExtOn 0.17 XML-Hash-LX 0.0603 XML-TinyXML 0.30 -- Father Chrysostomos
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Sun, 09 Dec 2012 00:41:45 +0100
To: perl5-porters [...] perl.org
From: ilmari [...] ilmari.org (Dagfinn Ilmari Mannsåker)
Download (untitled) / with headers
text/plain 287b
"Father Chrysostomos via RT" <perlbug-comment@perl.org> writes: Show quoted text
> MooseX-AttributeHelpers 0.23 > MooseX-MetaDescription 0.05
Both patched in git and maintainers prodded. -- "A disappointingly low fraction of the human race is, at any given time, on fire." - Stig Sandbeck Mathisen
RT-Send-CC: perl5-porters [...] perl.org
Catalyst-Action-REST 1.05 Flow 0.8 WebDAO 2.14 -- Father Chrysostomos
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Sun, 09 Dec 2012 20:39:57 +0100
To: perl5-porters [...] perl.org
From: ilmari [...] ilmari.org (Dagfinn Ilmari Mannsåker)
Download (untitled) / with headers
text/plain 349b
"Father Chrysostomos via RT" <perlbug-comment@perl.org> writes: Show quoted text
> Catalyst-Action-REST 1.05
Fixed in git and maintainer prodded. -- "The surreality of the universe tends towards a maximum" -- Skud's Law "Never formulate a law or axiom that you're not prepared to live with the consequences of." -- Skud's Meta-Law
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 2.2k
Net-Google-FederatedLogin, MooseX-Attribute-Deflator and Spreadsheet-WriteExcelXML are resolved. Please welcome Test-CGI-Multipart into the list. API-Plesk 2.01 App-Hachero 0.13 App-OpenVZ-BCWatch 0.03 Aspect 1.03 (patched) autobox-JSON 0.0003 Autocache 0.004 Bio-NEXUS 0.78 Bio-SDRS 0.08 Brannigan 0.9 Brickyard 1.111750 Business-RO-CNP 0.03 Catalyst-Action-REST 1.05 (patched) CatalystX-Controller-Sugar 0.0901 CatalystX-Declare 0.015 CGI-Application-Plugin-Session 1.03 CGI-Application-Plugin-Stream 2.10 CGI-Cookie-Splitter 0.02 CGI-FormBuilder 3.08 Class-AutoClass 1.54 Class-Generate 1.11 Class-Injection 1.08 Class-Trait 0.31 Collection 0.55 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 cPanel-SyncUtil 0.7 Crypt-OpenPGP 1.06 Data-Dump-XML 1.19 Data-ModeMerge 0.28 Data-PowerSet-Hash 0.02 Data-Visitor (https://github.com/nothingmuch/data-visitor/pull/2) DBI 1.622 DBIx-Class 0.08204 DBIx-ObjectMapper 0.3013 DBIx-Simple-OO 0.02 DBIx-Skinny 0.0742 DJabberd 0.85 Flow 0.8 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Graph-Easy 0.72 Gtk2 1.245 Gtk2-Ex-WidgetBits 48 Hash-AutoHash-Args 1.15 (patched) Hash-SafeKeys 0.02 HTML-FillInForm 2.1 HTML-StickyQuery-DoCoMoGUID 0.03 HTML-TagCloud 0.37 HTML-Transmorgify 0.09 I18N-Handle 0.051 InterMine-Item 0.98 Internals-DumpArenas 0.12 libwww-perl 6.04 (patch submitted) Lingua-Boolean (patched) List-Cycle 1.00 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-AttributeCloner 0.25 MooseX-AttributeHelpers 0.23 (patched) MooseX-MetaDescription 0.05 (patched) MooseX-Traits-Attribute-MergeHashRef 1.002 Net-Bot-IRC-NumericCodes 0.05 Net-FastCGI 0.13 Net-HTTP-API 0.14 Net-HTTP-Spore-0.04 https://github.com/franckcuny/net-http-spore/issues/19 Net-ISC-DHCPd 0.14 Net-MQTT package-watchdog 0.09 Params-Validate-Checks 0.01 Parse-CPAN-Packages 2.37 PDF-API2 2.019 PHP-HTTPBuildQuery 0.05 PITA-XML 0.51 Pod-POM 0.27 Pod-WSDL 0.061 RDF-NS-20120917 https://github.com/nichtich/RDF-NS/issues/2 Reflex 0.098 Role-REST-Client 0.13 Socialtext-Resting 0.38 Su 0.100 SWISH-Prog 0.65 TAP-Formatter-JUnit 0.09 Test-CGI-Multipart v0.0.3 Test-HTTP-Response 0.04 Test-Inline 2.212 Test-Module-Used 0.2.3 Text-vCard 2.12 Tie-FieldVals 0.6202 Tie-Hash-Indexed 0.05 Transmission-Client 0.0603 WebDAO 2.14 WebService-Simple 0.18 Yui-Loader 0.071 XML-ExtOn 0.17 XML-Hash-LX 0.0603 XML-TinyXML 0.30 -- Father Chrysostomos
CC: perl5-porters [...] perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Mon, 10 Dec 2012 08:06:14 +0100
To: "Father Chrysostomos via RT" <perlbug-comment [...] perl.org>
From: Andreas Koenig <andreas.koenig.7os6VVqR [...] franz.ak.mind.de>
Download (untitled) / with headers
text/plain 315b
"Father Chrysostomos via RT" <perlbug-comment@perl.org> writes: Show quoted text
> Net-Google-FederatedLogin, MooseX-Attribute-Deflator and > Spreadsheet-WriteExcelXML are resolved. > > Please welcome Test-CGI-Multipart into the list.
And SQL-Interp-1.21 RDF-Trine-1.002 (https://github.com/kasei/perlrdf/issues/76) -- andreas
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 147b
MooseX-TrackDirty-Attributes Pod-Weaver-Section-ClassMopper 1.120100 Test-Unit-Lite 0.1201 WWW-Analytics-MultiTouch 0.34 -- Father Chrysostomos
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 2.3k
Net-MQTT, Catalyst-Action-REST and MooseX-MetaDescription are resolved. New list: API-Plesk 2.01 App-Hachero 0.13 App-OpenVZ-BCWatch 0.03 Aspect 1.03 (patched) autobox-JSON 0.0003 Autocache 0.004 Bio-NEXUS 0.78 Bio-SDRS 0.08 Brannigan 0.9 Brickyard 1.111750 Business-RO-CNP 0.03 CatalystX-Controller-Sugar 0.0901 CatalystX-Declare 0.015 CGI-Application-Plugin-Session 1.03 CGI-Application-Plugin-Stream 2.10 CGI-Cookie-Splitter 0.02 CGI-FormBuilder 3.08 Class-AutoClass 1.54 Class-Generate 1.11 Class-Injection 1.08 Class-Trait 0.31 Collection 0.55 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 cPanel-SyncUtil 0.7 Crypt-OpenPGP 1.06 Data-Dump-XML 1.19 Data-ModeMerge 0.28 Data-PowerSet-Hash 0.02 Data-Visitor (https://github.com/nothingmuch/data-visitor/pull/2) DBI 1.622 DBIx-Class 0.08204 (patched) DBIx-ObjectMapper 0.3013 DBIx-Simple-OO 0.02 DBIx-Skinny 0.0742 DJabberd 0.85 Flow 0.8 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Graph-Easy 0.72 Gtk2 1.245 Gtk2-Ex-WidgetBits 48 Hash-AutoHash-Args 1.15 (patched) Hash-SafeKeys 0.02 HTML-FillInForm 2.1 HTML-StickyQuery-DoCoMoGUID 0.03 HTML-TagCloud 0.37 HTML-Transmorgify 0.09 I18N-Handle 0.051 InterMine-Item 0.98 Internals-DumpArenas 0.12 libwww-perl 6.04 (patch submitted) Lingua-Boolean (patched) List-Cycle 1.00 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-AttributeCloner 0.25 MooseX-AttributeHelpers 0.23 (patched) MooseX-TrackDirty-Attributes MooseX-Traits-Attribute-MergeHashRef 1.002 Net-Bot-IRC-NumericCodes 0.05 Net-FastCGI 0.13 Net-HTTP-API 0.14 Net-HTTP-Spore-0.04 https://github.com/franckcuny/net-http-spore/issues/19 Net-ISC-DHCPd 0.14 package-watchdog 0.09 Params-Validate-Checks 0.01 Parse-CPAN-Packages 2.37 PDF-API2 2.019 PHP-HTTPBuildQuery 0.05 PITA-XML 0.51 Pod-POM 0.27 Pod-Weaver-Section-ClassMopper 1.120100 Pod-WSDL 0.061 RDF-NS-20120917 https://github.com/nichtich/RDF-NS/issues/2 RDF-Trine-1.002 (patched) Reflex 0.098 Role-REST-Client 0.13 Socialtext-Resting 0.38 SQL-Interp-1.21 Su 0.100 SWISH-Prog 0.65 TAP-Formatter-JUnit 0.09 Test-CGI-Multipart v0.0.3 Test-HTTP-Response 0.04 Test-Inline 2.212 Test-Module-Used 0.2.3 Test-Unit-Lite 0.1201 Text-vCard 2.12 Tie-FieldVals 0.6202 Tie-Hash-Indexed 0.05 Transmission-Client 0.0603 WebDAO 2.14 WebService-Simple 0.18 WWW-Analytics-MultiTouch 0.34 Yui-Loader 0.071 XML-ExtOn 0.17 XML-Hash-LX 0.0603 XML-TinyXML 0.30 -- Father Chrysostomos
CC: perl5-porters [...] perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Tue, 18 Dec 2012 08:46:43 +0100
To: "Father Chrysostomos via RT" <perlbug-comment [...] perl.org>
From: Andreas Koenig <andreas.koenig.7os6VVqR [...] franz.ak.mind.de>
Download (untitled) / with headers
text/plain 2.4k
Resolved: Class-AutoClass, Collection, Data-ModeMerge, Data-PowerSet-Hash, Data-Visitor, Gtk2, Hash-SafeKeys, Lingua-Boolean, Parse-CPAN-Packages, Su, SWISH-Prog, Test-Module-Used New discoveries: Template-Toolkit, Try, Net-DNS-SEC, Mojolicious-Plugin-AccessLog, New list: API-Plesk 2.01 App-Hachero 0.13 App-OpenVZ-BCWatch (fixed in 0.03_01) Aspect 1.03 (patched) Autocache 0.004 Bio-NEXUS 0.78 Bio-SDRS 0.08 Brannigan 0.9 Brickyard 1.111750 Business-RO-CNP 0.03 CGI-Application-Plugin-Session 1.03 CGI-Application-Plugin-Stream 2.10 CGI-Cookie-Splitter 0.02 CGI-FormBuilder 3.08 CatalystX-Controller-Sugar 0.0901 CatalystX-Declare 0.015 Class-Generate 1.11 Class-Injection 1.08 Class-Trait 0.31 Convert-yEnc 1.04 Crypt-OpenPGP 1.06 DBI 1.622 (fixed in 1.622_924) DBIx-Class 0.08204 (patched) DBIx-ObjectMapper 0.3013 DBIx-Simple-OO 0.02 DBIx-Skinny 0.0742 DJabberd 0.85 (fixed in 0.85_01) Data-Dump-XML 1.19 Flow 0.8 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Graph-Easy 0.72 Gtk2-Ex-WidgetBits 48 HTML-FillInForm 2.1 HTML-StickyQuery-DoCoMoGUID 0.03 HTML-TagCloud 0.37 HTML-Transmorgify 0.09 Hash-AutoHash-Args 1.15 (fixed in 1.16_01) I18N-Handle 0.051 InterMine-Item 0.98 Internals-DumpArenas 0.12 List-Cycle 1.00 Mojolicious-Plugin-AccessLog 0.001 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-AttributeCloner 0.25 MooseX-AttributeHelpers 0.23 (patched) MooseX-TrackDirty-Attributes 2.002 MooseX-Traits-Attribute-MergeHashRef 1.002 Net-Bot-IRC-NumericCodes 0.05 Net-DNS-SEC 0.16 Net-FastCGI 0.13 Net-HTTP-API 0.14 Net-HTTP-Spore 0.05 https://github.com/franckcuny/net-http-spore/issues/19 Net-ISC-DHCPd 0.14 PDF-API2 2.019 PHP-HTTPBuildQuery 0.05 PITA-XML 0.51 Package-Watchdog 0.09 Params-Validate-Checks 0.01 Pod-POM 0.27 Pod-WSDL 0.061 Pod-Weaver-Section-ClassMopper 1.120100 (status unknown) RDF-NS 20120917 https://github.com/nichtich/RDF-NS/issues/2 RDF-Trine 1.002 (fixed in 1.002_01) Reflex 0.098 Role-REST-Client 0.13 SQL-Interp 1.21 Socialtext-Resting 0.38 TAP-Formatter-JUnit 0.09 Template-Toolkit 2.24 Test-CGI-Multipart v0.0.3 Test-HTTP-Response 0.04 Test-Inline 2.212 Test-Unit-Lite 0.1201 Text-vCard 2.12 Tie-FieldVals 0.6202 Tie-Hash-Indexed 0.05 Transmission-Client 0.0603 Try 0.02 WWW-Analytics-MultiTouch 0.35 WebDAO 2.14 WebService-Simple 0.18 XML-ExtOn 0.17 XML-Hash-LX 0.0603 XML-TinyXML 0.30 YUI-Loader 0.071 autobox-JSON 0.0003 cPanel-PublicAPI 1.002 cPanel-SyncUtil 0.7 libwww-perl 6.04 (patch submitted) -- andreas
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 272b
Just hit one in MIME::Types MIME::Types->new( complete_only => 1 )->mimeTypeOf(q{pl}) # randomly chooses between "text/x-perl" and "application/x-perl" and breaks Dancers test suite when it responds "text/x-perl". Bug: https://rt.cpan.org/Ticket/Display.html?id=82100
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 127b
Found a possible hash-randomization-caused test-failure in Template::Declare https://rt.cpan.org/Ticket/Display.html?id=82171
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 549b
On Tue Dec 18 21:31:21 2012, kentfredric wrote: Show quoted text
> Just hit one in MIME::Types > > MIME::Types->new( complete_only => 1 )->mimeTypeOf(q{pl}) > > # randomly chooses between "text/x-perl" and "application/x-perl" and > breaks Dancers test suite when it responds "text/x-perl". > > Bug: https://rt.cpan.org/Ticket/Display.html?id=82100
Specific case for this one is now resolved with https://metacpan.org/diff/release/MARKOV/MIME-Types-1.36/MARKOV/MIME-Types-1.37 However, in this case "Getting random results" appears to be somewhat by-design.
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 190b
Net-Whois-IANA-0.40 fails a test due to randomization : https://rt.cpan.org/Ticket/Display.html?id=82174 It could be Net::CIDR's fault, but it got too complicated for me to know for sure.
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 2.3k
App-perlbrew, Scrappy and EntityModel are broken. MIME-Types, Test-Unit-Lite and Text-vCard are fixed. New list: API-Plesk 2.01 App-Hachero 0.13 App-OpenVZ-BCWatch (fixed in 0.03_01) App-perlbrew 0.58 (#82105) Aspect 1.03 (patched) Autocache 0.004 Bio-NEXUS 0.78 Bio-SDRS 0.08 Brannigan 0.9 Brickyard 1.111750 Business-RO-CNP 0.03 CGI-Application-Plugin-Session 1.03 CGI-Application-Plugin-Stream 2.10 CGI-Cookie-Splitter 0.02 CGI-FormBuilder 3.08 CatalystX-Controller-Sugar 0.0901 CatalystX-Declare 0.015 Class-Generate 1.11 Class-Injection 1.08 Class-Trait 0.31 Convert-yEnc 1.04 Crypt-OpenPGP 1.06 DBI 1.622 (fixed in 1.622_924) DBIx-Class 0.08204 (patched) DBIx-ObjectMapper 0.3013 DBIx-Simple-OO 0.02 DBIx-Skinny 0.0742 DJabberd 0.85 (fixed in 0.85_01) Data-Dump-XML 1.19 EntityModel 0.017 Flow 0.8 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Graph-Easy 0.72 Gtk2-Ex-WidgetBits 48 HTML-FillInForm 2.1 HTML-StickyQuery-DoCoMoGUID 0.03 HTML-TagCloud 0.37 HTML-Transmorgify 0.09 Hash-AutoHash-Args 1.15 (fixed in 1.16_01) I18N-Handle 0.051 InterMine-Item 0.98 Internals-DumpArenas 0.12 List-Cycle 1.00 Mojolicious-Plugin-AccessLog 0.001 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-AttributeCloner 0.25 MooseX-AttributeHelpers 0.23 (patched) MooseX-TrackDirty-Attributes 2.002 MooseX-Traits-Attribute-MergeHashRef 1.002 Net-Bot-IRC-NumericCodes 0.05 Net-DNS-SEC 0.16 Net-FastCGI 0.13 Net-HTTP-API 0.14 Net-HTTP-Spore 0.05 https://github.com/franckcuny/net-http-spore/issues/19 Net-ISC-DHCPd 0.14 Net-Whois-IANA 0.40 PDF-API2 2.019 PHP-HTTPBuildQuery 0.05 PITA-XML 0.51 Package-Watchdog 0.09 Params-Validate-Checks 0.01 Pod-POM 0.27 Pod-WSDL 0.061 Pod-Weaver-Section-ClassMopper 1.120100 (status unknown) RDF-NS 20120917 https://github.com/nichtich/RDF-NS/issues/2 RDF-Trine 1.002 (fixed in 1.002_01) Reflex 0.098 Role-REST-Client 0.13 Scrappy 0.94112090 SQL-Interp 1.21 Socialtext-Resting 0.38 TAP-Formatter-JUnit 0.09 Template-Declare Template-Toolkit 2.24 Test-CGI-Multipart v0.0.3 Test-HTTP-Response 0.04 Test-Inline 2.212 Tie-FieldVals 0.6202 Tie-Hash-Indexed 0.05 Transmission-Client 0.0603 Try 0.02 WWW-Analytics-MultiTouch 0.35 WebDAO 2.14 WebService-Simple 0.18 XML-ExtOn 0.17 XML-Hash-LX 0.0603 XML-TinyXML 0.30 YUI-Loader 0.071 autobox-JSON 0.0003 cPanel-PublicAPI 1.002 cPanel-SyncUtil 0.7 libwww-perl 6.04 (patch submitted) -- Father Chrysostomos
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Tue, 25 Dec 2012 22:54:13 +0100
To: perl5-porters [...] perl.org
From: ilmari [...] ilmari.org (Dagfinn Ilmari Mannsåker)
Download (untitled) / with headers
text/plain 277b
"Father Chrysostomos via RT" <perlbug-comment@perl.org> writes: Show quoted text
> Pod-POM 0.27
Patch in RT: <https://rt.cpan.org/Public/Bug/Display.html?id=81707#txn-1159162> -- "A disappointingly low fraction of the human race is, at any given time, on fire." - Stig Sandbeck Mathisen
CC: Kevin Ryde <user42 [...] zip.com.au>
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Fri, 04 Jan 2013 00:35:14 +0100
To: perlbug-comment [...] perl.org
From: Torsten Schoenfeld <kaffeetisch [...] gmx.de>
Download (untitled) / with headers
text/plain 275b
On 18.12.2012 08:46, Andreas Koenig wrote: Show quoted text
> Resolved: ..., Gtk2, ...
The Gtk2 failure wasn't actually resolved until now. It was due to a bug in Glib, which I've fixed now. This should also fix the Gtk2::Ex::WidgetBits failure, but I'll leave that to Kevin to confirm.
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 180b
Just stumbled into one in Module-CPANTS-Analyse , caused by Test-CPAN-Meta-YAML returning items to ->error() in a varying order. https://rt.cpan.org/Ticket/Display.html?id=82939
RT-Send-CC: perl5-porters [...] perl.org
DBIx-Class-Schema-Config - https://rt.cpan.org/Ticket/Display.html? id=83309
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Thu, 14 Feb 2013 05:44:12 +0100
To: perlbug-followup [...] perl.org
From: demerphq <demerphq [...] gmail.com>
Download (untitled) / with headers
text/plain 501b
On 24 January 2013 21:46, Kent Fredric via RT <perlbug-followup@perl.org> wrote: Show quoted text
> Just stumbled into one in Module-CPANTS-Analyse , caused by > Test-CPAN-Meta-YAML returning items to ->error() in a varying order. > > https://rt.cpan.org/Ticket/Display.html?id=82939 > > --- > via perlbug: queue: perl5 status: open > https://rt.perl.org:443/rt3/Ticket/Display.html?id=115908
This one says it is fixed now. Thanks for reporting this Kent. Yves -- perl -Mre=debug -e "/just|another|perl|hacker/"
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Thu, 14 Feb 2013 05:47:58 +0100
To: perlbug-followup [...] perl.org
From: demerphq <demerphq [...] gmail.com>
Download (untitled) / with headers
text/plain 352b
On 13 February 2013 22:52, Kent Fredric via RT <perlbug-followup@perl.org> wrote: Show quoted text
> DBIx-Class-Schema-Config - https://rt.cpan.org/Ticket/Display.html? > id=83309
Perhaps it is a red herring but this sounds like it could be related to: https://rt.cpan.org/Public/Bug/Display.html?id=81516 Yves -- perl -Mre=debug -e "/just|another|perl|hacker/"
CC: perl5-porters [...] perl.org, Kevin Ryde <user42 [...] zip.com.au>
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Sat, 16 Feb 2013 12:43:41 +0100
To: perlbug-comment [...] perl.org
From: Torsten Schoenfeld <kaffeetisch [...] gmx.de>
Download (untitled) / with headers
text/plain 253b
On 23.12.2012 23:23, Father Chrysostomos via RT wrote: Show quoted text
> Gtk2-Ex-WidgetBits 48
I think this is fixed when running against Glib 1.290, right Kevin? Glib 1.290 is not on CPAN, but there will be a stable release on CPAN with the fix in time for 5.18.0.
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Sat, 16 Feb 2013 19:38:56 +0100
To: perl5-porters [...] perl.org
From: ilmari [...] ilmari.org (Dagfinn Ilmari Mannsåker)
Download (untitled) / with headers
text/plain 371b
"Kent Fredric via RT" <perlbug-followup@perl.org> writes: Show quoted text
Patch attach to the ticket. -- "I use RMS as a guide in the same way that a boat captain would use a lighthouse. It's good to know where it is, but you generally don't want to find yourself in the same spot." - Tollef Fog Heen
CC: perlbug-comment [...] perl.org, perl5-porters [...] perl.org
Subject: Re: [perl #115908] Hash randomisation breaks CPAN
Date: Mon, 18 Feb 2013 06:30:06 +1100
To: Torsten Schoenfeld <kaffeetisch [...] gmx.de>
From: Kevin Ryde <user42 [...] zip.com.au>
Download (untitled) / with headers
text/plain 266b
Torsten Schoenfeld <kaffeetisch@gmx.de> writes: Show quoted text
> > On 23.12.2012 23:23, Father Chrysostomos via RT wrote:
>> Gtk2-Ex-WidgetBits 48
> > I think this is fixed when running against Glib 1.290, right Kevin?
Yes I think so, though I don't have a way to test it as yet.
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 236b
On Sat Feb 16 10:39:46 2013, ilmari wrote: Show quoted text
> "Kent Fredric via RT" <perlbug-followup@perl.org> writes: >
> > DBIx-Class-Schema-Config -
> https://rt.cpan.org/Ticket/Display.html?id=83309 > > Patch attach to the ticket. >
Resolved.
Download (untitled) / with headers
text/plain 191b
On Sun Dec 23 14:23:41 2012, sprout wrote: Show quoted text
Ash reports that this is fixed in 0.06, now on CPAN. Nicholas Clark
RT-Send-CC: perl5-porters [...] perl.org
Download (untitled) / with headers
text/plain 133b
These libraries will stay broken until they are fixed by their maintainers. This is no longer something for p5p to track. -- rjbs


This service is sponsored and maintained by Best Practical Solutions and runs on Perl.org infrastructure.

For issues related to this RT instance (aka "perlbug"), please contact perlbug-admin at perl.org