search

Perl / perl5

🐪 The Perl programming language
https://dev.perl.org/perl5/
Other
1.85k stars 527 forks source link

Hash randomisation breaks CPAN #12616

Closed p5pRT closed 11 years ago

p5pRT commented 11 years ago

Migrated from rt.perl.org#115908 (status was 'resolved')

Searchable as RT115908$

p5pRT commented 11 years ago

From @cpansprout

Aspect 1.03 Autocache 0.004 CatalystX-Controller-Sugar 0.0901 Class-AutoClass 1.54 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 Crypt-OpenPGP 1.06 DateTime-Format-Flexible 0.23 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Hash-AutoHash-Args 1.15 libwww-perl 6.04 MooseX-Getopt 0.47 Params-Validate-Checks 0.01 Socialtext-Resting 0.38 Term-GentooFunctions 1.3605 Test-Inline 2.212 Tie-Hash-Indexed 0.05 WebService-Simple 0.18 XML-TinyXML 0.30

Flags​:   category=core   severity=low

Site configuration information for perl 5.17.7​:

Configured by sprout at Fri Nov 23 12​:46​:02 PST 2012.

Summary of my perl5 (revision 5 version 17 subversion 7) configuration​:   Commit id​: de0df3c095e361fff88c58066233c2210f8a55b1   Platform​:   osname=darwin\, osvers=10.5.0\, archname=darwin-thread-multi-2level   uname='darwin pint.local 10.5.0 darwin kernel version 10.5.0​: fri nov 5 23​:20​:39 pdt 2010; root​:xnu-1504.9.17~1release_i386 i386 '   config_args='-de -DDEBUGGING -Duseithreads -Dusedevel -Accflags=-DPERL_NEW_COPY_ON_WRITE'   hint=recommended\, useposix=true\, d_sigaction=define   useithreads=define\, usemultiplicity=define   useperlio=define\, d_sfio=undef\, uselargefiles=define\, usesocks=undef   use64bitint=undef\, use64bitall=undef\, uselongdouble=undef   usemymalloc=n\, bincompat5005=undef   Compiler​:   cc='cc'\, ccflags ='-fno-common -DPERL_DARWIN -DPERL_NEW_COPY_ON_WRITE -DDEBUGGING -fno-strict-aliasing -pipe -fstack-protector -I/usr/local/include'\,   optimize='-O3 -g'\,   cppflags='-fno-common -DPERL_DARWIN -DPERL_NEW_COPY_ON_WRITE -DDEBUGGING -fno-strict-aliasing -pipe -fstack-protector -I/usr/local/include'   ccversion=''\, gccversion='4.2.1 (Apple Inc. build 5664)'\, gccosandvers=''   intsize=4\, longsize=4\, ptrsize=4\, doublesize=8\, byteorder=1234   d_longlong=define\, longlongsize=8\, d_longdbl=define\, longdblsize=16   ivtype='long'\, ivsize=4\, nvtype='double'\, nvsize=8\, Off_t='off_t'\, lseeksize=8   alignbytes=8\, prototype=define   Linker and Libraries​:   ld='env MACOSX_DEPLOYMENT_TARGET=10.3 cc'\, ldflags =' -fstack-protector -L/usr/local/lib'   libpth=/usr/local/lib /usr/lib   libs=-ldbm -ldl -lm -lutil -lc   perllibs=-ldl -lm -lutil -lc   libc=\, so=dylib\, useshrplib=false\, libperl=libperl.a   gnulibc_version=''   Dynamic Linking​:   dlsrc=dl_dlopen.xs\, dlext=bundle\, d_dlsymun=undef\, ccdlflags=' '   cccdlflags=' '\, lddlflags=' -bundle -undefined dynamic_lookup -L/usr/local/lib -fstack-protector'

Locally applied patches​:  

@​INC for perl 5.17.7​:   /usr/local/lib/perl5/site_perl/5.17.7/darwin-thread-multi-2level   /usr/local/lib/perl5/site_perl/5.17.7   /usr/local/lib/perl5/5.17.7/darwin-thread-multi-2level   /usr/local/lib/perl5/5.17.7   /usr/local/lib/perl5/site_perl   .

Environment for perl 5.17.7​:   DYLD_LIBRARY_PATH (unset)   HOME=/Users/sprout   LANG=en_US.UTF-8   LANGUAGE (unset)   LD_LIBRARY_PATH (unset)   LOGDIR (unset)   PATH=/usr/bin​:/bin​:/usr/sbin​:/sbin​:/usr/local/bin​:/usr/X11/bin​:/usr/local/bin   PERL_BADLANG (unset)   SHELL=/bin/bash

p5pRT commented 11 years ago

From @demerphq

Hash randomization has not "broken" these\, they were broken already and nobody knew.

What do you propose we do about this? What is the point of this ticket?

Yves

On 25 November 2012 22​:20\, Father Chrysostomos \perlbug\-followup@​perl\.org wrote​:

# New Ticket Created by Father Chrysostomos # Please include the string​: [perl #115908] # in the subject line of all future correspondence about this issue. # \<URL​: https://rt-archive.perl.org/perl5/Ticket/Display.html?id=115908 >

Aspect 1.03 Autocache 0.004 CatalystX-Controller-Sugar 0.0901 Class-AutoClass 1.54 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 Crypt-OpenPGP 1.06 DateTime-Format-Flexible 0.23 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Hash-AutoHash-Args 1.15 libwww-perl 6.04 MooseX-Getopt 0.47 Params-Validate-Checks 0.01 Socialtext-Resting 0.38 Term-GentooFunctions 1.3605 Test-Inline 2.212 Tie-Hash-Indexed 0.05 WebService-Simple 0.18 XML-TinyXML 0.30

--- Flags​: category=core severity=low --- Site configuration information for perl 5.17.7​:

Configured by sprout at Fri Nov 23 12​:46​:02 PST 2012.

Summary of my perl5 (revision 5 version 17 subversion 7) configuration​: Commit id​: de0df3c095e361fff88c58066233c2210f8a55b1 Platform​: osname=darwin\, osvers=10.5.0\, archname=darwin-thread-multi-2level uname='darwin pint.local 10.5.0 darwin kernel version 10.5.0​: fri nov 5 23​:20​:39 pdt 2010; root​:xnu-1504.9.17~1release_i386 i386 ' config_args='-de -DDEBUGGING -Duseithreads -Dusedevel -Accflags=-DPERL_NEW_COPY_ON_WRITE' hint=recommended\, useposix=true\, d_sigaction=define useithreads=define\, usemultiplicity=define useperlio=define\, d_sfio=undef\, uselargefiles=define\, usesocks=undef use64bitint=undef\, use64bitall=undef\, uselongdouble=undef usemymalloc=n\, bincompat5005=undef Compiler​: cc='cc'\, ccflags ='-fno-common -DPERL_DARWIN -DPERL_NEW_COPY_ON_WRITE -DDEBUGGING -fno-strict-aliasing -pipe -fstack-protector -I/usr/local/include'\, optimize='-O3 -g'\, cppflags='-fno-common -DPERL_DARWIN -DPERL_NEW_COPY_ON_WRITE -DDEBUGGING -fno-strict-aliasing -pipe -fstack-protector -I/usr/local/include' ccversion=''\, gccversion='4.2.1 (Apple Inc. build 5664)'\, gccosandvers='' intsize=4\, longsize=4\, ptrsize=4\, doublesize=8\, byteorder=1234 d_longlong=define\, longlongsize=8\, d_longdbl=define\, longdblsize=16 ivtype='long'\, ivsize=4\, nvtype='double'\, nvsize=8\, Off_t='off_t'\, lseeksize=8 alignbytes=8\, prototype=define Linker and Libraries​: ld='env MACOSX_DEPLOYMENT_TARGET=10.3 cc'\, ldflags =' -fstack-protector -L/usr/local/lib' libpth=/usr/local/lib /usr/lib libs=-ldbm -ldl -lm -lutil -lc perllibs=-ldl -lm -lutil -lc libc=\, so=dylib\, useshrplib=false\, libperl=libperl.a gnulibc_version='' Dynamic Linking​: dlsrc=dl_dlopen.xs\, dlext=bundle\, d_dlsymun=undef\, ccdlflags=' ' cccdlflags=' '\, lddlflags=' -bundle -undefined dynamic_lookup -L/usr/local/lib -fstack-protector'

Locally applied patches​:

--- @​INC for perl 5.17.7​: /usr/local/lib/perl5/site_perl/5.17.7/darwin-thread-multi-2level /usr/local/lib/perl5/site_perl/5.17.7 /usr/local/lib/perl5/5.17.7/darwin-thread-multi-2level /usr/local/lib/perl5/5.17.7 /usr/local/lib/perl5/site_perl .

--- Environment for perl 5.17.7​: DYLD_LIBRARY_PATH (unset) HOME=/Users/sprout LANG=en_US.UTF-8 LANGUAGE (unset) LD_LIBRARY_PATH (unset) LOGDIR (unset) PATH=/usr/bin​:/bin​:/usr/sbin​:/sbin​:/usr/local/bin​:/usr/X11/bin​:/usr/local/bin PERL_BADLANG (unset) SHELL=/bin/bash

-- perl -Mre=debug -e "/just|another|perl|hacker/"

p5pRT commented 11 years ago

The RT System itself - Status changed from 'new' to 'open'

p5pRT commented 11 years ago

From @cpansprout

On Mon Nov 26 00​:07​:03 2012\, demerphq wrote​:

Hash randomization has not "broken" these\, they were broken already and nobody knew.

What do you propose we do about this? What is the point of this ticket?

We should make sure that all these modules at least have patches before 5.18 ships.

--

Father Chrysostomos

p5pRT commented 11 years ago

From [Unknown Contact. See original ticket]

On Mon Nov 26 00​:07​:03 2012\, demerphq wrote​:

Hash randomization has not "broken" these\, they were broken already and nobody knew.

What do you propose we do about this? What is the point of this ticket?

We should make sure that all these modules at least have patches before 5.18 ships.

--

Father Chrysostomos

p5pRT commented 11 years ago

From @demerphq

On 26 November 2012 15​:20\, Father Chrysostomos via RT \perlbug\-comment@&#8203;perl\.org wrote​:

On Mon Nov 26 00​:07​:03 2012\, demerphq wrote​:

Hash randomization has not "broken" these\, they were broken already and nobody knew.

What do you propose we do about this? What is the point of this ticket?

We should make sure that all these modules at least have patches before 5.18 ships.

Personally I don't agree. These modules\, or more likely their tests\, are buggy\, making incorrect assumptions.

To me this is much like depending on a broken sqrt() function returning 2 for the square root of 5. Any fallout from fixing such a bug is IMO not our problem.

I fixed all such bugs in the code in core. I don't feel obliged to do so for all such bugs on CPAN. Although if the community\, through the pumpking\, decides otherwise I will be happy to contribute to the solution.

cheers\, Yves

-- perl -Mre=debug -e "/just|another|perl|hacker/"

p5pRT commented 11 years ago

From @nwc10

On Mon\, Nov 26\, 2012 at 04​:06​:46PM +0100\, demerphq wrote​:

On 26 November 2012 15​:20\, Father Chrysostomos via RT \perlbug\-comment@&#8203;perl\.org wrote​:

On Mon Nov 26 00​:07​:03 2012\, demerphq wrote​:

Hash randomization has not "broken" these\, they were broken already and nobody knew.

What do you propose we do about this? What is the point of this ticket?

We should make sure that all these modules at least have patches before 5.18 ships.

Personally I don't agree. These modules\, or more likely their tests\, are buggy\, making incorrect assumptions.

I think that "we" is key.

To me this is much like depending on a broken sqrt() function returning 2 for the square root of 5. Any fallout from fixing such a bug is IMO not our problem.

Yes your right\, it isn't. But also it ends up being so\, in as much as rule 1 (the other rule 1) "people are stupid"\, and end up blaming the most obvious thing that they last changed\, which in this case could well be an attempt to upgrade core perl. (Which can mean that they *don't* upgrade\, which in the short term doesn't affect us\, but in the long term kills us)

I fixed all such bugs in the code in core. I don't feel obliged to do so for all such bugs on CPAN. Although if the community\, through the pumpking\, decides otherwise I will be happy to contribute to the solution.

I don't think that *you* should. (And thanks for doing all the herding of bugs on dual life modules\, as well as the core C changes). Please relax and enjoy a well earned beer (or two)*

This seems an excellent task that *anyone on this list* could help chip away at\, given that likely all it needs is a knowledge of perl.

So\, volunteers welcome.

1) Pick a module from the list 2) figure out the fix 3) send a patch to that module's bugtracker 4) feel good

Nicholas Clark

* Or a single malt.

p5pRT commented 11 years ago

From @bulk88

On Mon Nov 26 07​:07​:16 2012\, demerphq wrote​:

On 26 November 2012 15​:20\, Father Chrysostomos via RT \perlbug\-comment@&#8203;perl\.org wrote​:

On Mon Nov 26 00​:07​:03 2012\, demerphq wrote​:

Hash randomization has not "broken" these\, they were broken already and nobody knew.

What do you propose we do about this? What is the point of this ticket?

We should make sure that all these modules at least have patches before 5.18 ships.

Personally I don't agree. These modules\, or more likely their tests\, are buggy\, making incorrect assumptions.

To me this is much like depending on a broken sqrt() function returning 2 for the square root of 5. Any fallout from fixing such a bug is IMO not our problem.

I fixed all such bugs in the code in core. I don't feel obliged to do so for all such bugs on CPAN. Although if the community\, through the pumpking\, decides otherwise I will be happy to contribute to the solution.

cheers\, Yves

My opinion is if you use undocumented behavior\, and you get burned\, it is your fault alone. perldoc has had the hash order warning for about 10 years http​://perl5.git.perl.org/perl.git/commit/4546b9e60350d925ea9a8210378c9e1a79f4a7ab .

-- bulk88 ~ bulk88 at hotmail.com

p5pRT commented 11 years ago

From @demerphq

On 26 November 2012 16​:45\, Nicholas Clark \nick@&#8203;ccl4\.org wrote​:

On Mon\, Nov 26\, 2012 at 04​:06​:46PM +0100\, demerphq wrote​:

On 26 November 2012 15​:20\, Father Chrysostomos via RT \perlbug\-comment@&#8203;perl\.org wrote​:

On Mon Nov 26 00​:07​:03 2012\, demerphq wrote​:

Hash randomization has not "broken" these\, they were broken already and nobody knew.

What do you propose we do about this? What is the point of this ticket?

We should make sure that all these modules at least have patches before 5.18 ships.

Personally I don't agree. These modules\, or more likely their tests\, are buggy\, making incorrect assumptions.

I think that "we" is key.

To me this is much like depending on a broken sqrt() function returning 2 for the square root of 5. Any fallout from fixing such a bug is IMO not our problem.

Yes your right\, it isn't. But also it ends up being so\, in as much as rule 1 (the other rule 1) "people are stupid"\, and end up blaming the most obvious thing that they last changed\, which in this case could well be an attempt to upgrade core perl. (Which can mean that they *don't* upgrade\, which in the short term doesn't affect us\, but in the long term kills us)

Ok\, seen from this point of view FC's post makes more sense.

I fixed all such bugs in the code in core. I don't feel obliged to do so for all such bugs on CPAN. Although if the community\, through the pumpking\, decides otherwise I will be happy to contribute to the solution.

I don't think that *you* should. (And thanks for doing all the herding of bugs on dual life modules\, as well as the core C changes). Please relax and enjoy a well earned beer (or two)*

Thanks. Ill go for the single malt. Been off beer since I had my appendix out.

This seems an excellent task that *anyone on this list* could help chip away at\, given that likely all it needs is a knowledge of perl.

So\, volunteers welcome.

1) Pick a module from the list 2) figure out the fix 3) send a patch to that module's bugtracker 4) feel good

Note that 2) probably amount to :"search for use of keys() without sort\, sort the keys\, repeat until problem goes away".

Sometimes it is more devious than that\, and id be happy to provide support in such a case.

cheers\, Yves

-- perl -Mre=debug -e "/just|another|perl|hacker/"

p5pRT commented 11 years ago

From @rjbs

* demerphq \demerphq@&#8203;gmail\.com [2012-11-26T10​:06​:46]

On 26 November 2012 15​:20\, Father Chrysostomos via RT

We should make sure that all these modules at least have patches before 5.18 ships.

[...] I fixed all such bugs in the code in core. I don't feel obliged to do so for all such bugs on CPAN. Although if the community\, through the pumpking\, decides otherwise I will be happy to contribute to the solution.

I just wanted to second what Nick said in his reply​: you have absolutely no obligation\, and shouldn't feel that you do! You should enjoy a nice /^whiske?y$/.

On the other hand\, I'm not going to release a 5.18.0 that can't install LWP. :-) So the ticket is quite useful for me\, at least.

-- rjbs

p5pRT commented 11 years ago

From @cpansprout

DateTime-Format-Flexible and Term-GentooFunctions have been fixed\, leaving these​:

Aspect 1.03 Autocache 0.004 CatalystX-Controller-Sugar 0.0901 Class-AutoClass 1.54 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 Crypt-OpenPGP 1.06 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Hash-AutoHash-Args 1.15 libwww-perl 6.04 MooseX-Getopt 0.47 Params-Validate-Checks 0.01 Socialtext-Resting 0.38 Test-Inline 2.212 Tie-Hash-Indexed 0.05 WebService-Simple 0.18 XML-TinyXML 0.30

--

Father Chrysostomos

p5pRT commented 11 years ago

From [Unknown Contact. See original ticket]

DateTime-Format-Flexible and Term-GentooFunctions have been fixed\, leaving these​:

Aspect 1.03 Autocache 0.004 CatalystX-Controller-Sugar 0.0901 Class-AutoClass 1.54 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 Crypt-OpenPGP 1.06 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Hash-AutoHash-Args 1.15 libwww-perl 6.04 MooseX-Getopt 0.47 Params-Validate-Checks 0.01 Socialtext-Resting 0.38 Test-Inline 2.212 Tie-Hash-Indexed 0.05 WebService-Simple 0.18 XML-TinyXML 0.30

--

Father Chrysostomos

p5pRT commented 11 years ago

From @tomhukins

On Sun\, Nov 25\, 2012 at 01​:20​:16PM -0800\, Father Chrysostomos wrote​:

libwww-perl 6.04

I've just build blead (cd298ce42eb) and have run LWP's test suite repeatedly. I can't make it fail. Furthermore I can't see any test failures at http​://www.cpantesters.org/distro/L/libwww-perl.html that appear due to hash randomisation.

Can you provide further details?

Thanks\, Tom

p5pRT commented 11 years ago

From @demerphq

On 27 November 2012 22​:24\, Tom Hukins \tom@&#8203;eborcom\.com wrote​:

On Sun\, Nov 25\, 2012 at 01​:20​:16PM -0800\, Father Chrysostomos wrote​:

libwww-perl 6.04

I've just build blead (cd298ce42eb) and have run LWP's test suite repeatedly. I can't make it fail. Furthermore I can't see any test failures at http​://www.cpantesters.org/distro/L/libwww-perl.html that appear due to hash randomisation.

Can you provide further details?

Set HTTP_PROXY to something.

Then run the tests.

I just pushed patches\, filed a pull request\, and commented on the ticket via RT with further details.

Patch​:

https://github.com/demerphq/libwww-perl/commit/96791d2f72dc20ab6ff3c6ce6442a8db509bcfcc

-- perl -Mre=debug -e "/just|another|perl|hacker/"

p5pRT commented 11 years ago

From @cpansprout

Two more​:

Parse-CPAN-Packages 2.37 SQL-Abstract-More 1.07

--

Father Chrysostomos

p5pRT commented 11 years ago

From [Unknown Contact. See original ticket]

Two more​:

Parse-CPAN-Packages 2.37 SQL-Abstract-More 1.07

--

Father Chrysostomos

p5pRT commented 11 years ago

From @karenetheridge

On Tue Nov 27 07​:32​:10 2012\, sprout wrote​:

MooseX-Getopt 0.47

I'll take this one.

p5pRT commented 11 years ago

From @cpansprout

Five more​:

Reflex 0.098 Test-Weaken 3.020000 Text-vCard 2.12 Verilog-Perl 3.317 XML-ExtOn 0.17

--

Father Chrysostomos

p5pRT commented 11 years ago

From [Unknown Contact. See original ticket]

Five more​:

Reflex 0.098 Test-Weaken 3.020000 Text-vCard 2.12 Verilog-Perl 3.317 XML-ExtOn 0.17

--

Father Chrysostomos

p5pRT commented 11 years ago

From @cpansprout

DBI and XML-Rabbit are broken. Verilog-Perl is now fixed. Updated list​:

Aspect 1.03 Autocache 0.004 CatalystX-Controller-Sugar 0.0901 Class-AutoClass 1.54 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 Crypt-OpenPGP 1.06 DBI 1.622 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Hash-AutoHash-Args 1.15 libwww-perl 6.04 (patch submitted) MooseX-Getopt 0.47 Params-Validate-Checks 0.01 Parse-CPAN-Packages 2.37 Reflex 0.098 Socialtext-Resting 0.38 SQL-Abstract-More 1.07 Test-Inline 2.212 Test-Weaken 3.020000 Text-vCard 2.12 Tie-Hash-Indexed 0.05 WebService-Simple 0.18 XML-ExtOn 0.17 XML-Rabbit 0.1.1 XML-TinyXML 0.30

--

Father Chrysostomos

p5pRT commented 11 years ago

From [Unknown Contact. See original ticket]

DBI and XML-Rabbit are broken. Verilog-Perl is now fixed. Updated list​:

Aspect 1.03 Autocache 0.004 CatalystX-Controller-Sugar 0.0901 Class-AutoClass 1.54 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 Crypt-OpenPGP 1.06 DBI 1.622 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Hash-AutoHash-Args 1.15 libwww-perl 6.04 (patch submitted) MooseX-Getopt 0.47 Params-Validate-Checks 0.01 Parse-CPAN-Packages 2.37 Reflex 0.098 Socialtext-Resting 0.38 SQL-Abstract-More 1.07 Test-Inline 2.212 Test-Weaken 3.020000 Text-vCard 2.12 Tie-Hash-Indexed 0.05 WebService-Simple 0.18 XML-ExtOn 0.17 XML-Rabbit 0.1.1 XML-TinyXML 0.30

--

Father Chrysostomos

p5pRT commented 11 years ago

From @ilmari

"Father Chrysostomos via RT" \perlbug\-comment@&#8203;perl\.org writes​:

MooseX-Getopt 0.47

I can't reproduce this failure with either threaded or unthreaded perl 5.17.6 on Linux x86_64. The purported cpantesters report linked from \https://rt.cpan.org/Ticket/Display.html?id=81418 is an unrelated failure on v5.13.11.

-- "A disappointingly low fraction of the human race is\, at any given time\, on fire." - Stig Sandbeck Mathisen

p5pRT commented 11 years ago

From @demerphq

On 29 November 2012 13​:01\, Dagfinn Ilmari Mannsåker \ilmari@&#8203;ilmari\.org wrote​:

"Father Chrysostomos via RT" \perlbug\-comment@&#8203;perl\.org writes​:

MooseX-Getopt 0.47

I can't reproduce this failure with either threaded or unthreaded perl 5.17.6 on Linux x86_64. The purported cpantesters report linked from \https://rt.cpan.org/Ticket/Display.html?id=81418 is an unrelated failure on v5.13.11.

Did you run it *many* times?

Yves

-- perl -Mre=debug -e "/just|another|perl|hacker/"

p5pRT commented 11 years ago

From @ilmari

demerphq \demerphq@&#8203;gmail\.com writes​:

On 29 November 2012 13​:01\, Dagfinn Ilmari Mannsåker \ilmari@&#8203;ilmari\.org wrote​:

"Father Chrysostomos via RT" \perlbug\-comment@&#8203;perl\.org writes​:

MooseX-Getopt 0.47

I can't reproduce this failure with either threaded or unthreaded perl 5.17.6 on Linux x86_64. The purported cpantesters report linked from \https://rt.cpan.org/Ticket/Display.html?id=81418 is an unrelated failure on v5.13.11.

Did you run it *many* times?

I've run it over a thousand times now (for about an hour\, each run takes 2-3 seconds) without a single failure.

Does anyone have an example of an actual failure?

-- "I use RMS as a guide in the same way that a boat captain would use a lighthouse. It's good to know where it is\, but you generally don't want to find yourself in the same spot." - Tollef Fog Heen

p5pRT commented 11 years ago

From @demerphq

On 29 November 2012 15​:26\, Dagfinn Ilmari Mannsåker \ilmari@&#8203;ilmari\.org wrote​:

demerphq \demerphq@&#8203;gmail\.com writes​:

On 29 November 2012 13​:01\, Dagfinn Ilmari Mannsåker \ilmari@&#8203;ilmari\.org wrote​:

"Father Chrysostomos via RT" \perlbug\-comment@&#8203;perl\.org writes​:

MooseX-Getopt 0.47

I can't reproduce this failure with either threaded or unthreaded perl 5.17.6 on Linux x86_64. The purported cpantesters report linked from \https://rt.cpan.org/Ticket/Display.html?id=81418 is an unrelated failure on v5.13.11.

Did you run it *many* times?

I've run it over a thousand times now (for about an hour\, each run takes 2-3 seconds) without a single failure.

Does anyone have an example of an actual failure?

Does it test anything from the environment?

Yves

-- perl -Mre=debug -e "/just|another|perl|hacker/"

p5pRT commented 11 years ago

From @cpansprout

On Thu Nov 29 06​:27​:36 2012\, ilmari wrote​:

demerphq \demerphq@&#8203;gmail\.com writes​:

On 29 November 2012 13​:01\, Dagfinn Ilmari Manns�ker \ilmari@&#8203;ilmari\.org wrote​:

"Father Chrysostomos via RT" \perlbug\-comment@&#8203;perl\.org writes​:

MooseX-Getopt 0.47

I can't reproduce this failure with either threaded or unthreaded perl 5.17.6 on Linux x86_64. The purported cpantesters report linked from \https://rt.cpan.org/Ticket/Display.html?id=81418 is an unrelated failure on v5.13.11.

Did you run it *many* times?

I've run it over a thousand times now (for about an hour\, each run takes 2-3 seconds) without a single failure.

Does anyone have an example of an actual failure?

I only added it to the list because I saw the CPAN ticket. If it’s bogus\, then we can ignore it.

BTW\, we have three additions\, Search-Tools\, YUI-Loader and Graph-Easy. The list is now​:

Aspect 1.03 (patched) Autocache 0.004 CatalystX-Controller-Sugar 0.0901 Class-AutoClass 1.54 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 Crypt-OpenPGP 1.06 DBI 1.622 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Graph-Easy 0.72 Hash-AutoHash-Args 1.15 libwww-perl 6.04 (patch submitted) MooseX-Getopt 0.47 (possibly bogus) Params-Validate-Checks 0.01 Parse-CPAN-Packages 2.37 Reflex 0.098 Search-Tools 0.84 Socialtext-Resting 0.38 SQL-Abstract-More 1.07 Test-Inline 2.212 Test-Weaken 3.020000 Text-vCard 2.12 Tie-Hash-Indexed 0.05 WebService-Simple 0.18 Yui-Loader 0.071 XML-ExtOn 0.17 XML-Rabbit 0.1.1 XML-TinyXML 0.30

--

Father Chrysostomos

p5pRT commented 11 years ago

From [Unknown Contact. See original ticket]

On Thu Nov 29 06​:27​:36 2012\, ilmari wrote​:

demerphq \demerphq@&#8203;gmail\.com writes​:

On 29 November 2012 13​:01\, Dagfinn Ilmari Manns�ker \ilmari@&#8203;ilmari\.org wrote​:

"Father Chrysostomos via RT" \perlbug\-comment@&#8203;perl\.org writes​:

MooseX-Getopt 0.47

I can't reproduce this failure with either threaded or unthreaded perl 5.17.6 on Linux x86_64. The purported cpantesters report linked from \https://rt.cpan.org/Ticket/Display.html?id=81418 is an unrelated failure on v5.13.11.

Did you run it *many* times?

I've run it over a thousand times now (for about an hour\, each run takes 2-3 seconds) without a single failure.

Does anyone have an example of an actual failure?

I only added it to the list because I saw the CPAN ticket. If it’s bogus\, then we can ignore it.

BTW\, we have three additions\, Search-Tools\, YUI-Loader and Graph-Easy. The list is now​:

Aspect 1.03 (patched) Autocache 0.004 CatalystX-Controller-Sugar 0.0901 Class-AutoClass 1.54 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 Crypt-OpenPGP 1.06 DBI 1.622 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Graph-Easy 0.72 Hash-AutoHash-Args 1.15 libwww-perl 6.04 (patch submitted) MooseX-Getopt 0.47 (possibly bogus) Params-Validate-Checks 0.01 Parse-CPAN-Packages 2.37 Reflex 0.098 Search-Tools 0.84 Socialtext-Resting 0.38 SQL-Abstract-More 1.07 Test-Inline 2.212 Test-Weaken 3.020000 Text-vCard 2.12 Tie-Hash-Indexed 0.05 WebService-Simple 0.18 Yui-Loader 0.071 XML-ExtOn 0.17 XML-Rabbit 0.1.1 XML-TinyXML 0.30

--

Father Chrysostomos

p5pRT commented 11 years ago

From @cpansprout

On Thu Nov 29 07​:05​:15 2012\, demerphq wrote​:

On 29 November 2012 15​:26\, Dagfinn Ilmari Manns�ker \ilmari@&#8203;ilmari\.org wrote​:

demerphq \demerphq@&#8203;gmail\.com writes​:

On 29 November 2012 13​:01\, Dagfinn Ilmari Manns�ker \ilmari@&#8203;ilmari\.org wrote​:

"Father Chrysostomos via RT" \perlbug\-comment@&#8203;perl\.org writes​:

MooseX-Getopt 0.47

I can't reproduce this failure with either threaded or unthreaded perl 5.17.6 on Linux x86_64. The purported cpantesters report linked from \https://rt.cpan.org/Ticket/Display.html?id=81418 is an unrelated failure on v5.13.11.

Did you run it *many* times?

I've run it over a thousand times now (for about an hour\, each run takes 2-3 seconds) without a single failure.

Does anyone have an example of an actual failure?

Does it test anything from the environment?

This module doesn’t use each() at all. The only uses of keys are insensitive to the order. So the CPAN ticket is mistaken.

--

Father Chrysostomos

p5pRT commented 11 years ago

From @karenetheridge

On Thu Nov 29 04​:03​:16 2012\, ilmari wrote​:

"Father Chrysostomos via RT" \perlbug\-comment@&#8203;perl\.org writes​:

MooseX-Getopt 0.47

I can't reproduce this failure with either threaded or unthreaded perl 5.17.6 on Linux x86_64. The purported cpantesters report linked from \https://rt.cpan.org/Ticket/Display.html?id=81418 is an unrelated failure on v5.13.11.

That was my mistake; I misfiled this report in the chaos of the several failed reports I received that day. Sorry for the confusion!

MooseX​::Getopt 0.47 seems to be okay. However\, MooseX​::LazyRequire 0.08 is not​: https://rt.cpan.org/Ticket/Display.html?id=81419 (which I will resolve by this weekend).

p5pRT commented 11 years ago

From @chorny

Also Net-FastCGI-0.13 - https://rt.cpan.org/Ticket/Display.html?id=81543

-- Alexandr Ciornii\, http​://chorny.net

p5pRT commented 11 years ago

From @cpansprout

Two more​:

TAP-Formatter-JUnit 0.09 Test-Module-Used 0.2.3

--

Father Chrysostomos

p5pRT commented 11 years ago

From [Unknown Contact. See original ticket]

Two more​:

TAP-Formatter-JUnit 0.09 Test-Module-Used 0.2.3

--

Father Chrysostomos

p5pRT commented 11 years ago

From @cpansprout

Five more​:

Locale-Maketext-Lexicon 0.91 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-AttributeHelpers 0.23 Net-Google-FederatedLogin 0.7.1 Transmission-Client 0.0603

--

Father Chrysostomos

p5pRT commented 11 years ago

From [Unknown Contact. See original ticket]

Five more​:

Locale-Maketext-Lexicon 0.91 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-AttributeHelpers 0.23 Net-Google-FederatedLogin 0.7.1 Transmission-Client 0.0603

--

Father Chrysostomos

p5pRT commented 11 years ago

From @demerphq

On 30 November 2012 06​:32\, Father Chrysostomos via RT \perlbug\-comment@&#8203;perl\.org wrote​:

Five more​:

Locale-Maketext-Lexicon 0.91 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-AttributeHelpers 0.23 Net-Google-FederatedLogin 0.7.1 Transmission-Client 0.0603

How are you identifying these FC?

Yves

-- perl -Mre=debug -e "/just|another|perl|hacker/"

p5pRT commented 11 years ago

From @cpansprout

On Fri Nov 30 01​:31​:37 2012\, demerphq wrote​:

On 30 November 2012 06​:32\, Father Chrysostomos via RT \perlbug\-comment@&#8203;perl\.org wrote​:

Five more​:

Locale-Maketext-Lexicon 0.91 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-AttributeHelpers 0.23 Net-Google-FederatedLogin 0.7.1 Transmission-Client 0.0603

How are you identifying these FC?

I’m just watching the CPAN tickets appear when Andreas files them. :-)

LWP was the only one I found myself.

--

Father Chrysostomos

p5pRT commented 11 years ago

From [Unknown Contact. See original ticket]

On Fri Nov 30 01​:31​:37 2012\, demerphq wrote​:

On 30 November 2012 06​:32\, Father Chrysostomos via RT \perlbug\-comment@&#8203;perl\.org wrote​:

Five more​:

Locale-Maketext-Lexicon 0.91 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-AttributeHelpers 0.23 Net-Google-FederatedLogin 0.7.1 Transmission-Client 0.0603

How are you identifying these FC?

I’m just watching the CPAN tickets appear when Andreas files them. :-)

LWP was the only one I found myself.

--

Father Chrysostomos

p5pRT commented 11 years ago

From @cpansprout

Seven more​:

Net-HTTP-API 0.14 Net-ISC-DHCPd 0.14 package-watchdog 0.09 PDF-API2 2.019 PHP-HTTPBuildQuery 0.05 Pod-WSDL 0.061 POE-Component-Client-BigBrother 1.00

--

Father Chrysostomos

p5pRT commented 11 years ago

From [Unknown Contact. See original ticket]

Seven more​:

Net-HTTP-API 0.14 Net-ISC-DHCPd 0.14 package-watchdog 0.09 PDF-API2 2.019 PHP-HTTPBuildQuery 0.05 Pod-WSDL 0.061 POE-Component-Client-BigBrother 1.00

--

Father Chrysostomos

p5pRT commented 11 years ago

From @cpansprout

SQL-Abstract-More and Test-Weaken are fixed.

Aspect 1.03 (patched) Autocache 0.004 CatalystX-Controller-Sugar 0.0901 Class-AutoClass 1.54 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 Crypt-OpenPGP 1.06 DBI 1.622 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Graph-Easy 0.72 Hash-AutoHash-Args 1.15 libwww-perl 6.04 (patch submitted) Locale-Maketext-Lexicon 0.91 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-AttributeHelpers 0.23 Net-FastCGI 0.13 Net-Google-FederatedLogin 0.7.1 Net-HTTP-API 0.14 Net-ISC-DHCPd 0.14 package-watchdog 0.09 Params-Validate-Checks 0.01 Parse-CPAN-Packages 2.37 PDF-API2 2.019 PHP-HTTPBuildQuery 0.05 Pod-WSDL 0.061 POE-Component-Client-BigBrother 1.00 Reflex 0.098 Search-Tools 0.84 Socialtext-Resting 0.38 TAP-Formatter-JUnit 0.09 Test-Inline 2.212 Test-Module-Used 0.2.3 Text-vCard 2.12 Tie-Hash-Indexed 0.05 Transmission-Client 0.0603 WebService-Simple 0.18 Yui-Loader 0.071 XML-ExtOn 0.17 XML-Rabbit 0.1.1 XML-TinyXML 0.30

--

Father Chrysostomos

p5pRT commented 11 years ago

From [Unknown Contact. See original ticket]

SQL-Abstract-More and Test-Weaken are fixed.

Aspect 1.03 (patched) Autocache 0.004 CatalystX-Controller-Sugar 0.0901 Class-AutoClass 1.54 Convert-yEnc 1.04 cPanel-PublicAPI 1.002 Crypt-OpenPGP 1.06 DBI 1.622 FormValidator-LazyWay 0.19 Google-AJAX-Library 0.022 Graph-Easy 0.72 Hash-AutoHash-Args 1.15 libwww-perl 6.04 (patch submitted) Locale-Maketext-Lexicon 0.91 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-AttributeHelpers 0.23 Net-FastCGI 0.13 Net-Google-FederatedLogin 0.7.1 Net-HTTP-API 0.14 Net-ISC-DHCPd 0.14 package-watchdog 0.09 Params-Validate-Checks 0.01 Parse-CPAN-Packages 2.37 PDF-API2 2.019 PHP-HTTPBuildQuery 0.05 Pod-WSDL 0.061 POE-Component-Client-BigBrother 1.00 Reflex 0.098 Search-Tools 0.84 Socialtext-Resting 0.38 TAP-Formatter-JUnit 0.09 Test-Inline 2.212 Test-Module-Used 0.2.3 Text-vCard 2.12 Tie-Hash-Indexed 0.05 Transmission-Client 0.0603 WebService-Simple 0.18 Yui-Loader 0.071 XML-ExtOn 0.17 XML-Rabbit 0.1.1 XML-TinyXML 0.30

--

Father Chrysostomos

p5pRT commented 11 years ago

From @andk

"Father Chrysostomos via RT" \perlbug\-comment@&#8203;perl\.org writes​:

On Fri Nov 30 01​:31​:37 2012\, demerphq wrote​:

On 30 November 2012 06​:32\, Father Chrysostomos via RT \perlbug\-comment@&#8203;perl\.org wrote​:

Five more​:

Locale-Maketext-Lexicon 0.91 Mojolicious-Plugin-ShareHelpers 0.52 MooseX-AttributeHelpers 0.23 Net-Google-FederatedLogin 0.7.1 Transmission-Client 0.0603

How are you identifying these FC?

I’m just watching the CPAN tickets appear when Andreas files them. :-)

:) Thanks for doing that\,

Here are three more from github​:

Net-HTTP-Spore-0.04 https://github.com/franckcuny/net-http-spore/issues/19 MooseX-Attribute-Deflator-2.2.1 https://github.com/monken/p5-moosex-attribute-deflator/issues/4 RDF-NS-20120917 https://github.com/nichtich/RDF-NS/issues/2

LWP was the only one I found myself.

and I'm mining the data that my smokers generate. There's still a bit more to wade through.

-- andreas

p5pRT commented 11 years ago

From @cpansprout

Net-Bot-IRC-NumericCodes 0.05 PITA-XML 0.51 Su 0.100 Tie-FieldVals 0.6202

--

Father Chrysostomos

p5pRT commented 11 years ago

From [Unknown Contact. See original ticket]

Net-Bot-IRC-NumericCodes 0.05 PITA-XML 0.51 Su 0.100 Tie-FieldVals 0.6202

--

Father Chrysostomos

p5pRT commented 11 years ago

From @cpansprout

Catalyst-Runtime 5.90018 Class-Trait 0.31

And that puts us up to 50\, unless I miscounted.

Does that mean that something needs to be rethought?

--

Father Chrysostomos

p5pRT commented 11 years ago

From [Unknown Contact. See original ticket]

Catalyst-Runtime 5.90018 Class-Trait 0.31

And that puts us up to 50\, unless I miscounted.

Does that mean that something needs to be rethought?

--

Father Chrysostomos

p5pRT commented 11 years ago

From @csjewell

On Fri\, Nov 30\, 2012\, at 22​:32\, Father Chrysostomos via RT wrote​:

Catalyst-Runtime 5.90018 Class-Trait 0.31

And that puts us up to 50\, unless I miscounted.

Does that mean that something needs to be rethought?

If this was something we hadn't warned about for 5+ years might happen\, yes. Since we have\, then no. -- Curtis Jewell csjewell@​cpan.org http​://csjewell.dreamwidth.org/ perl@​csjewell.fastmail.us http​://csjewell.comyr.org/perl/

"Your random numbers are not that random" -- perl-5.10.1.tar.gz/util.c

Strawberry Perl for Windows betas​: http​://strawberryperl.com/beta/

p5pRT commented 11 years ago

From @cpansprout

API-Plesk 2.01 App-Hachero 0.13 App-OpenVZ-BCWatch 0.03 Bio-NEXUS 0.78 Bio-SDRS 0.08 Brannigan 0.9 Business-RO-CNP 0.03 CatalystX-Declare 0.015 CGI-Alert 2.05 CGI-Application-Plugin-Session 1.03 CGI-Cookie-Splitter 0.02

--

Father Chrysostomos

p5pRT commented 11 years ago

From [Unknown Contact. See original ticket]

API-Plesk 2.01 App-Hachero 0.13 App-OpenVZ-BCWatch 0.03 Bio-NEXUS 0.78 Bio-SDRS 0.08 Brannigan 0.9 Business-RO-CNP 0.03 CatalystX-Declare 0.015 CGI-Alert 2.05 CGI-Application-Plugin-Session 1.03 CGI-Cookie-Splitter 0.02

--

Father Chrysostomos

p5pRT commented 11 years ago

From @demerphq

On 1 December 2012 08​:55\, Curtis Jewell \perl@&#8203;csjewell\.fastmail\.us wrote​:

On Fri\, Nov 30\, 2012\, at 22​:32\, Father Chrysostomos via RT wrote​:

Catalyst-Runtime 5.90018 Class-Trait 0.31

And that puts us up to 50\, unless I miscounted.

Does that mean that something needs to be rethought?

If this was something we hadn't warned about for 5+ years might happen\, yes. Since we have\, then no.

I agree. But I also think we need evangalists like yourself to blog and tweet and post like crazy about this and get people to fix their stuff ASAP.

I posted to Perlmonks\, but I suspect you have a wider audience than I do\, and can probably shame people into activity better than I can. ;-)

Yves

-- perl -Mre=debug -e "/just|another|perl|hacker/"