partial review

master
Joey Hess 2010-02-02 13:31:07 -05:00
parent 1febfda911
commit 6b98269aa3
1 changed files with 32 additions and 0 deletions

View File

@ -160,3 +160,35 @@ wrong direction.
* Proper documentation.
--[[David_Riebenbauer]]
> Starting review of this. Some of your commits are to very delicate,
> optimised, and security-sensitive ground, so I have to look at them very
> carefully. --[[Joey]]
>
> * In the refactoring in f3abeac919c4736429bd3362af6edf51ede8e7fe,
> you introduced at least 2 bugs, one a possible security hole.
> Now one part of the code tests `if ($file)` and the other
> caller tests `if ($f)`. These two tests both tested `if (! defined $f)`
> before. Notice that the variable needs to be the untainted variable
> for both. Also notice that `if ($f)` fails if `$f` contains `0`,
> which is a very common perl gotcha.
> * Your refactored code changes `-l $_ || -d _` to `-l $file || -d $file`.
> The latter makes one more stat system call; note the use of a
> bare `_` in the first to make perl reuse the stat buffer.
> * (As a matter of style, could you put a space after the commas in your
> perl?)
>
> I'd like to cherry-pick the above commit, once it's in shape, before
> looking at the rest in detail. So just a few other things that stood out.
>
> * Commit 4af4d26582f0c2b915d7102fb4a604b176385748 seems unnecessary.
> `srcfile($file, 1)` already is documented to return undef if the
> file does not exist. (But without the second parameter, it throws
> an error.)
>
> * Commit f58f3e1bec41ccf9316f37b014ce0b373c8e49e1 adds a line
> that is intented by a space, not a tab.
>
> * Commit f58f3e1bec41ccf9316f37b014ce0b373c8e49e1 says that auto-added
> files will be recreated if the user deletes them. That seems bad.
> `autoindex` goes to some trouble to not recreate deleted files.