[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#664484: lintian: Add pedantic check for perl -w warnings



tags 664484 + wontfix
thanks

Hi,

Thanks for the suggestion.

Unfortunately "perl -c" executes parts of the script unlike the "sh/bash -n"
counterparts.  Namely, BEGIN blocks are run as demonstrated by [1].  So
this would trivially create an "arbitrary command execution" vulnerability
in Lintian.

Furthermore, it fails if the dependencies are not installed (if the
script uses "use Module").

~Niels

[1]
$ cat test.pl 
use strict;
use warnings;

BEGIN {
    system("echo \"HALLO WORLD\"");
};
$ perl -c test.pl 
HALLO WORLD
test.pl syntax OK




Reply to: