[#41908] [Backport93 - Backport #5844][Open] Can't install ruby-debug-base19 — Brian Osborne <bosborne11@...>
3 messages
2012/01/05
[#41916] Proposal: Bitmap Marking GC — Narihiro Nakamura <authornari@...>
Hi.
18 messages
2012/01/05
[#41919] Re: Proposal: Bitmap Marking GC
— Roger Pack <rogerdpack2@...>
2012/01/05
> And, GC is a little bit slower. But, I think it's in acceptable range.
[#41968] Re: Proposal: Bitmap Marking GC
— Eric Wong <normalperson@...>
2012/01/07
Narihiro Nakamura <authornari@gmail.com> wrote:
[#41969] Re: Proposal: Bitmap Marking GC
— KOSAKI Motohiro <kosaki.motohiro@...>
2012/01/07
> Narihiro Nakamura <authornari@gmail.com> wrote:
[#41934] feature request: marshallable proc's — Roger Pack <rogerdpack2@...>
Every so often I wish I could do something like
10 messages
2012/01/05
[#41936] Re: feature request: marshallable proc's
— Urabe Shyouhei <shyouhei@...>
2012/01/06
On 2012年01月06日 08:54, Roger Pack wrote:
[#42898] Re: feature request: marshallable proc's
— SASADA Koichi <ko1@...>
2012/02/25
What should happen on the following code?
[#41979] [ruby-trunk - Bug #5865][Open] Exception#== should return false if the classes differ — Hiro Asari <asari.ruby@...>
10 messages
2012/01/08
[#41997] [ruby-trunk - Bug #5865] Exception#== should return false if the classes differ
— Hiro Asari <asari.ruby@...>
2012/01/09
[#42000] Re: [ruby-trunk - Bug #5865] Exception#== should return false if the classes differ
— Yukihiro Matsumoto <matz@...>
2012/01/09
Hi,
[#42002] Re: [ruby-trunk - Bug #5865] Exception#== should return false if the classes differ
— Nikolai Weibull <now@...>
2012/01/09
On Mon, Jan 9, 2012 at 12:43, Yukihiro Matsumoto <matz@ruby-lang.org> wrote:
[#42003] [ruby-trunk - Bug #5871][Open] regexp \W matches some word characters when inside a case-insensitive character class — Gareth Adams <gareth@...>
14 messages
2012/01/09
[#42016] [ruby-trunk - Feature #5873][Open] Adopt FFI over DL — Heesob Park <phasis@...>
15 messages
2012/01/10
[#42035] [ruby-trunk - Feature #5873] Adopt FFI over DL
— Heesob Park <phasis@...>
2012/01/10
[#42125] Re: [ruby-trunk - Feature #5873] Adopt FFI over DL
— Aaron Patterson <tenderlove@...>
2012/01/13
On Tue, Jan 10, 2012 at 10:01:26PM +0900, Heesob Park wrote:
[#42127] Re: [ruby-trunk - Feature #5873] Adopt FFI over DL
— Nobuyoshi Nakada <nobu@...>
2012/01/14
Hi,
[#42129] Re: [ruby-trunk - Feature #5873] Adopt FFI over DL
— KOSAKI Motohiro <kosaki.motohiro@...>
2012/01/14
> To remove original DL completely, we have to bundle libffi itself
[#42042] RUBY 2 RCR: remove Thread#raise — Roger Pack <rogerdpack2@...>
Hello.
6 messages
2012/01/10
[#42061] Re: RUBY 2 RCR: remove Thread#raise
— Eric Wong <normalperson@...>
2012/01/11
Roger Pack <rogerdpack2@gmail.com> wrote:
[#42049] [ruby-trunk - Bug #5877][Open] Poor performance of initial and final UTF-8 substrings — Nathan Weizenbaum <nex342@...>
4 messages
2012/01/10
[#42063] [ruby-trunk - Bug #5884][Open] Float::NAN and 0.0/0.0 is represented differently when packed with 'g' — Hiro Asari <asari.ruby@...>
9 messages
2012/01/11
[#42080] [ruby-trunk - Bug #5887][Open] The documentation of Module.constants is incorrect — Shugo Maeda <redmine@...>
9 messages
2012/01/12
[#42085] [ruby-trunk - Bug #5888][Open] JSON unittest fails — Vit Ondruch <v.ondruch@...>
13 messages
2012/01/12
[#42093] Backport93 help needed for a few Windows requests? — Jon <jon.forums@...>
Currently the following Windows-specific backport requests to ruby_1_9_3 remain unassigned:
4 messages
2012/01/12
[#42113] [ruby-trunk - Feature #5893][Open] named return,next... — Ondrej Bilka <neleai@...>
7 messages
2012/01/13
[#42114] Re: [ruby-trunk - Feature #5893][Open] named return,next...
— Anurag Priyam <anurag08priyam@...>
2012/01/13
On Fri, Jan 13, 2012 at 7:21 PM, Ondrej Bilka <neleai@seznam.cz> wrote:
[#42115] Re: [ruby-trunk - Feature #5893][Open] named return,next...
— Ondřej Bílka <neleai@...>
2012/01/13
On Fri, Jan 13, 2012 at 11:11:28PM +0900, Anurag Priyam wrote:
[#42139] [ruby-trunk - Feature #5898][Open] raise and Exception#initialize — Thomas Sawyer <transfire@...>
10 messages
2012/01/16
[#42149] [ruby-trunk - Feature #5899][Open] chaining comparsions. — Ondrej Bilka <neleai@...>
12 messages
2012/01/16
[#42160] [ruby-trunk - Bug #5902][Open] Array#join with an unused, infected separator may or may not infect the result — John Firebaugh <john.firebaugh@...>
8 messages
2012/01/17
[#42164] [ruby-trunk - Feature #5903][Open] Optimize st_table (take 2) — Yura Sokolov <funny.falcon@...>
18 messages
2012/01/17
[#42189] [ruby-trunk - Bug #5914][Open] Calling extend with an anonymous module requires use of parentheses — Mark Somerville <mark@...>
3 messages
2012/01/20
[#42194] [ruby-trunk - Bug #5915][Open] Array#join with explicit nil should not use $, — John Firebaugh <john.firebaugh@...>
10 messages
2012/01/20
[#42222] [ruby-trunk - Bug #5925][Open] Lazy initialization is not thread safe. — Xuân Baldauf <xuan--2009--xbaldauf--redmine.ruby-lang.org@...>
5 messages
2012/01/23
[#42235] [ruby-trunk - Bug #5931][Open] Random SEGV during execution on YARD specs — Vit Ondruch <v.ondruch@...>
9 messages
2012/01/26
[#42246] Fwd: RCR String#{last, first} — Roger Pack <rogerdpack2@...>
Hello.
6 messages
2012/01/27
[#42256] [ruby-trunk - Feature #5945][Open] Add the ability to mark a at_exit as process-local. — Robert Gleeson <rob@...>
4 messages
2012/01/30
[#42257] [Backport93 - Backport #5942][Open] Backport r34309-34310 r34312-32414 — Yura Sokolov <funny.falcon@...>
4 messages
2012/01/30
[#42285] Why Ruby 1.9 GUI hangs if i do any intensive computation in separate Ruby thread? — Grigory Petrov <grigory.v.p@...>
Hello
4 messages
2012/01/31
[#42286] Re: Why Ruby 1.9 GUI hangs if i do any intensive computation in separate Ruby thread?
— "Haase, Konstantin" <Konstantin.Haase@...>
2012/01/31
the GIL is *not* supposed to lift if some threads enters native code...
[ruby-core:42167] Re: [ruby-trunk - Bug #5902] Array#join with an unused, infected separator may or may not infect the result
From:
"Martin J. Dürst" <duerst@...>
Date:
2012-01-18 06:51:59 UTC
List:
ruby-core #42167
Hi Matz,
On 2012/01/17 22:57, Yukihiro Matsumoto wrote:
>
> Issue #5902 has been updated by Yukihiro Matsumoto.
>
>
> In this case, tainted/untrusted string info is never used in the result. Why should it be tainted?
As far as I understand, the case of
> s = [].join(",".taint.untrust)
> s.tainted? #=> false
> s.untrusted? #=> false
is fine, as you say. What's being called out as a bug is
> s = [1].join(",".taint.untrust)
> s.tainted? #=> true
> s.untrusted? #=> true
In this case, as in the above case, the tainted/untrusted "," isn't used
at all, but still the resulting string is tainted and untrusted. That's
what's called out as a potential bug. What do you think?
I have had a quick look at the code and will add a potential patch to
the bug.
Regards, Martin.
> Matz.
> ----------------------------------------
> Bug #5902: Array#join with an unused, infected separator may or may not infect the result
> https://bugs.ruby-lang.org/issues/5902
>
> Author: John Firebaugh
> Status: Assigned
> Priority: Normal
> Assignee: Yukihiro Matsumoto
> Category: core
> Target version:
> ruby -v: ruby 1.9.3p0 (2011-10-30 revision 33570) [x86_64-darwin10.8.0]
>
>
> =begin
> It's infected if the separator is unused because there is only one element, but not if there are zero elements. Is this intended behavior?
>
> s = [].join(",".taint.untrust)
> s.tainted? #=> false
> s.untrusted? #=> false
>
> s = [1].join(",".taint.untrust)
> s.tainted? #=> true
> s.untrusted? #=> true
> =end
>
>
>