[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Potentially insecure Perl scripts



On 1/23/19 5:31 PM, Colin Watson wrote:
> On Wed, Jan 23, 2019 at 05:23:10PM +0100, Alex Mestiashvili wrote:
>> On 1/23/19 4:44 PM, Vincent Lefevre wrote:
>>> I agree that it would be better to drop this "feature" of Perl.
>>> It is probably never used, and probably useless (I would rather
>>> use the features from the shell if I need a pipe).
>>
>> Perl's open is well documented. Quoting the perlipc:
>>
>> "it's much more efficient to process the file one line or record at a
>> time because then you don't have to read the whole thing into memory at
>> once."
> 
> This is a red herring.  Prepending a pipe to a perl command doesn't
> require reading the whole thing into memory.

Well, this is not never used and is not useless. I just provided a quote
pointing to a use case. Deciding if that is useful or not is up to you.

> 
>> Please stop making python out of perl :)
> 
> This makes no sense in context, since Python programs routinely process
> files a line at a time.  Surely this is just derailing?
> 

That's just a joke. At the moment of writing I was thinking about
TIMTOWTDI paradigm of perl. Please note the smile.


Reply to: