[#1207] warning in ruby extension eats memory — Eugene Scripnik <Eugene.Scripnik@...>

This message was posted to ruby-talk, but I didn't get responce from

22 messages 2003/07/01
[#1208] Re: warning in ruby extension eats memory — ts <decoux@...> 2003/07/01

>>>>> "E" == Eugene Scripnik <Eugene.Scripnik@itgrp.net> writes:

[#1209] Re: warning in ruby extension eats memory — Eugene Scripnik <Eugene.Scripnik@...> 2003/07/02

ts wrote:

[#1210] Re: warning in ruby extension eats memory — ts <decoux@...> 2003/07/02

>>>>> "E" == Eugene Scripnik <Eugene.Scripnik@itgrp.net> writes:

[#1211] Re: warning in ruby extension eats memory — Eugene Scripnik <Eugene.Scripnik@...> 2003/07/04

ts wrote:

[#1212] Re: warning in ruby extension eats memory — ts <decoux@...> 2003/07/04

>>>>> "E" == Eugene Scripnik <Eugene.Scripnik@itgrp.net> writes:

[#1213] Re: warning in ruby extension eats memory — Eugene Scripnik <Eugene.Scripnik@...> 2003/07/04

ts wrote:

[#1214] Re: warning in ruby extension eats memory — ts <decoux@...> 2003/07/04

>>>>> "E" == Eugene Scripnik <Eugene.Scripnik@itgrp.net> writes:

[#1215] Re: warning in ruby extension eats memory — Eugene Scripnik <Eugene.Scripnik@...> 2003/07/04

ts wrote:

[#1237] FTP.new with block — Gavin Sinclair <gsinclair@...>

Hi,

22 messages 2003/07/19
[#1238] Re: [Patch] FTP.new with block — ts <decoux@...> 2003/07/19

>>>>> "G" == Gavin Sinclair <gsinclair@soyabean.com.au> writes:

[#1240] Re: [Patch] FTP.new with block — Mathieu Bouchard <matju@...> 2003/07/19

[#1297] Fix for Bug 1058 — Markus Walser <walser@...>

Hi,

16 messages 2003/07/25

Tainting in YAML

From: why the lucky stiff <ruby-core@...>
Date: 2003-07-29 17:03:45 UTC
List: ruby-core #1325
I'm following Marshal's tainting code in my YAML extension.  Basically,
if an incoming String is tainted, then taint the objects when loaded.
(Oddly, all data marshalled from IO goes untainted.  Is this right?)

In the YAML extension, you can hook the loader.  So if I register a type
handler:

  YAML::add_private_type( 'test' ) do |type, val|
    YAML::object_maker( TestClass, val )
  end

The above is commonly used to load YAML as a Class via hook.  The YAML
in this case looks like this:

  --- !!test
  x: 1
  y: 2

Where `x' and `y' are class properties.

Now, as for tainting.  Do I taint before or after the hook?  How big of
a security hole is this?

_why

P.S. Tainting code is active in Syck CVS, but not Ruby CVS at the moment.

In This Thread

Prev Next