Brian Duggan on 23 Aug 2017 13:24:56 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[Philadelphia-pm] Fall Season: Unix Race Conditions


Hi All,

Jim Keenan has volunteered to kick off the fall season of phl.pm
on September 11 with this talk:

         Security Implications of "Time of Check to Time of Use"
                     for Widely Used Perl Code

Programming in Unix environments is vulnerable to security problems when
something can happen between the time the status of a filesystem entry
is checked and a system call changing the status of that entity is made.
Perl code can be written to minimize this vulnerability, but one widely
used Perl function, "File::Path::rmtree()", fails to do so when used in
its default format.  The latest version of this function is safer but
will cause some Perl code in production to function differently from the
way it has since 1997.

More details (location/time) are on the meetup page.

    https://www.meetup.com/Philadelphia-Perl-Mongers/

Hope folks can make it!

Brian
_______________________________________________
Philadelphia-pm mailing list
Philadelphia-pm@pm.org
http://mail.pm.org/mailman/listinfo/philadelphia-pm