B::Stash - XSLoader security from 0.22

Fixes https://rt.cpan.org/Ticket/Display.html?id=116201 to avoid exploitable invalid "(eval 1)" rootdir.
jkahrman · Jul 16, 2016 · 2168747 · 2168747
1 parent 13d0397
commit 2168747
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/Stash/Stash.pm b/Stash/Stash.pm
@@ -1,7 +1,7 @@
 # Stash.pm -- show what stashes are loaded
 package B::Stash;
 
-our $VERSION = '1.02';
+our $VERSION = '1.03';
 
 =pod
 
@@ -72,6 +72,7 @@ sub import {
     eval q[
      CHECK {
       ] . ($debug ? q[print "scanxs main\n"; my $debug=1;] : "") . q[
+#line 2 B/Stash.pm
       require XSLoader;
       XSLoader::load('B::Stash'); # for xs only
       my @arr = scanxs( $main::{"main::"},'',$debug );