Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix link to Crosby paper on Algorithmic Complexity Attacks in perlsec #15321

Closed
p5pRT opened this issue May 11, 2016 · 5 comments
Closed

Fix link to Crosby paper on Algorithmic Complexity Attacks in perlsec #15321

p5pRT opened this issue May 11, 2016 · 5 comments
Labels
distro-darwin documentation

Comments

@p5pRT
Copy link

p5pRT commented May 11, 2016

Migrated from rt.perl.org#128126 (status was 'resolved')

Searchable as RT128126$
@p5pRT
Copy link
Author

p5pRT commented May 11, 2016

From preaction@me.com

Created by madcityzen@gmail.com

This patch fixes a broken link in perlsec. I'm not sure if this is the
best, most-stable link to this paper, but it's better than broken

Perl Info 

Flags:
    category=docs
    severity=low
    Type=Patch
    PatchStatus=HasPatch

Site configuration information for perl 5.20.0:

Configured by doug at Fri Jul  4 18:36:34 CDT 2014.

Summary of my perl5 (revision 5 version 20 subversion 0) configuration:
   
  Platform:
    osname=darwin, osvers=13.2.0, archname=darwin-2level
    uname='darwin dora-2.local 13.2.0 darwin kernel version 13.2.0: thu apr 17 23:03:13 pdt 2014; root:xnu-2422.100.13~1release_x86_64 x86_64 '
    config_args='-de -Dprefix=/Users/doug/perl5/perlbrew/perls/perl-5.20.0 -Aeval:scriptdir=/Users/doug/perl5/perlbrew/perls/perl-5.20.0/bin'
    hint=recommended, useposix=true, d_sigaction=define
    useithreads=undef, usemultiplicity=undef
    use64bitint=define, use64bitall=define, uselongdouble=undef
    usemymalloc=n, bincompat5005=undef
  Compiler:
    cc='cc', ccflags ='-fno-common -DPERL_DARWIN -fno-strict-aliasing -pipe -fstack-protector -I/usr/local/include',
    optimize='-O3',
    cppflags='-fno-common -DPERL_DARWIN -fno-strict-aliasing -pipe -fstack-protector -I/usr/local/include'
    ccversion='', gccversion='4.2.1 Compatible Apple LLVM 5.1 (clang-503.0.40)', gccosandvers=''
    intsize=4, longsize=8, ptrsize=8, doublesize=8, byteorder=12345678
    d_longlong=define, longlongsize=8, d_longdbl=define, longdblsize=16
    ivtype='long', ivsize=8, nvtype='double', nvsize=8, Off_t='off_t', lseeksize=8
    alignbytes=8, prototype=define
  Linker and Libraries:
    ld='env MACOSX_DEPLOYMENT_TARGET=10.3 cc', ldflags =' -fstack-protector -L/usr/local/lib'
    libpth=/usr/local/lib /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/../lib/clang/5.1/lib /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/lib /usr/lib
    libs=-lgdbm -ldbm -ldl -lm -lutil -lc
    perllibs=-ldl -lm -lutil -lc
    libc=, so=dylib, useshrplib=false, libperl=libperl.a
    gnulibc_version=''
  Dynamic Linking:
    dlsrc=dl_dlopen.xs, dlext=bundle, d_dlsymun=undef, ccdlflags=' '
    cccdlflags=' ', lddlflags=' -bundle -undefined dynamic_lookup -L/usr/local/lib -fstack-protector'



@INC for perl 5.20.0:
    /Users/doug/perl5/perlbrew/perls/perl-5.20.0/lib/site_perl/5.20.0/darwin-2level
    /Users/doug/perl5/perlbrew/perls/perl-5.20.0/lib/site_perl/5.20.0
    /Users/doug/perl5/perlbrew/perls/perl-5.20.0/lib/5.20.0/darwin-2level
    /Users/doug/perl5/perlbrew/perls/perl-5.20.0/lib/5.20.0
    .


Environment for perl 5.20.0:
    DYLD_LIBRARY_PATH (unset)
    HOME=/Users/doug
    LANG=en_US.UTF-8
    LANGUAGE (unset)
    LC_CTYPE=en_US.UTF-8
    LD_LIBRARY_PATH (unset)
    LOGDIR (unset)
    PATH=/Users/doug/perl5/perlbrew/bin:/Users/doug/perl5/perlbrew/perls/perl-5.20.0/bin:/usr/local/share/npm/bin:/Users/doug/dot-files/powerline/scripts:/Users/doug/perl5/bin:/usr/local/bin:/usr/local/sbin:/usr/bin:/bin:/usr/sbin:/sbin:/Users/doug/dot-files/bin:/Users/doug/dot-files/tmuxifier/bin:/Users/doug/dot-files/git-extras/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:/opt/X11/bin:/usr/local/git/bin:/usr/local/share/npm/bin:/Users/doug/dot-files/powerline/scripts:/Users/doug/perl5/bin:/usr/local/sbin:/Users/doug/dot-files/bin:/Users/doug/dot-files/tmuxifier/bin:/Users/doug/dot-files/git-extras/bin
    PERLBREW_BASHRC_VERSION=0.72
    PERLBREW_HOME=/Users/doug/.perlbrew
    PERLBREW_MANPATH=/Users/doug/perl5/perlbrew/perls/perl-5.20.0/man
    PERLBREW_PATH=/Users/doug/perl5/perlbrew/bin:/Users/doug/perl5/perlbrew/perls/perl-5.20.0/bin
    PERLBREW_PERL=perl-5.20.0
    PERLBREW_ROOT=/Users/doug/perl5/perlbrew
    PERLBREW_VERSION=0.72
    PERL_BADLANG (unset)
    SHELL=/bin/zsh

@p5pRT
Copy link
Author

p5pRT commented May 11, 2016

From preaction@me.com

0001-fix-link-to-crosby-paper-on-hash-complexity-attack.patch 
From 061c4b39f71d670ba5f624edcf3b9b8c6b0635b7 Mon Sep 17 00:00:00 2001
From: Doug Bell <madcityzen@gmail.com>
Date: Wed, 11 May 2016 11:10:40 -0500
Subject: [PATCH] fix link to crosby paper on hash complexity attack

---
 pod/perlsec.pod | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pod/perlsec.pod b/pod/perlsec.pod
index 6eb1bd2..43dd136 100644
--- a/pod/perlsec.pod
+++ b/pod/perlsec.pod
@@ -573,7 +573,7 @@ misbehave on any input.
 
 =back
 
-See L<http://www.cs.rice.edu/~scrosby/hash/> for more information,
+See L<https://www.usenix.org/legacy/events/sec03/tech/full_papers/crosby/crosby.pdf> for more information,
 and any computer science textbook on algorithmic complexity.
 
 =head1 SEE ALSO
-- 
2.6.4

@p5pRT
Copy link
Author

p5pRT commented May 11, 2016

From @jkeenan

Invalidity of current link confirmed. Validity of proposed link confirmed. Applied to blead in commit b25b06c.

Thank you very much.

--
James E Keenan (jkeenan@​cpan.org)

@p5pRT
Copy link
Author

p5pRT commented May 11, 2016

The RT System itself - Status changed from 'new' to 'open'

@p5pRT
Copy link
Author

p5pRT commented May 11, 2016

@jkeenan - Status changed from 'open' to 'resolved'

@p5pRT p5pRT closed this as completed May 11, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
distro-darwin documentation
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@p5pRT