Pike-devel January 2020

pike-devel@lists.lysator.liu.se

4 participants
5 discussions

Pike Meet-up 2018-Q1
by Henrik Grubbstr�m (Lysator) ＠ Pike (-) developers forum 20 Oct '21

20 Oct '21

Hi. At Pike Conference 2017 it was decided that we ought to hold a more informal meeting in Linköping ~ once every quarter. As the three month mark from the conference is coming up soon, it seems time to announce the first such meeting for 2018: Pike Meet-up 2018-Q1 Date: 2018-02-03 (Sat) Time: 10:00 - afternoon/evening Place: Roxen IS AB S:t Larsgatan 22A Linköping Welcome! /grubba

2 13

Operator assignment and strict_types
by Marc Simpson 07 Jul '20

07 Jul '20

Hi folks, It looks like operator assignment (op=), increment and decrement statements aren't subjected to the same typechecks as their more explicit equivalents. For example, neither the post-increment nor += statements below warn with strict_types enabled, even though they assign values outside of foo's restricted int domain: int(3..3) foo = 3; foo++; // no warning foo += 1; // no warning foo = foo + 1; // warning from strict_types Similarly, operator assignment on aggregates fails to elicit a warning: array(int) a = ({}); multiset(int) b = (<>); mapping(int:int) c = ([]); // no warnings a += ({ "hey" }); b += (< "hey" >); c += ([ "hey": "there" ]); // warnings from strict_types a = a + ({ "hey" }); b = b + (< "hey" >); c = c + ([ "hey": "there" ]); I'm guessing this is because the checks provided by the F_ASSIGN/F_ASSIGN_SELF case (las.c) only apply to direct assignment; op= and friends are presumably not instrumented for strict_types in the same manner. Have there been any discussions around addressing this inconsistency? Thanks, Marc

3 3

Remixml, javascript module
by Stephen R. van den Berg 25 Feb '20

25 Feb '20

This might be of interest to the Pike and/or Roxen community: https://www.npmjs.com/package/remixml I just launched it. Using it in a Single-Page-Application website. Any critical feedback is welcome (I'm currently the only user, so changes in the API are easy and still allowed). >From the description: Remixml is an XML/HTML macro language/template engine. The language and primitives used blend in completely with standard XML/HTML syntax and therefore integrate smoothly with existing XML/HTML syntax colouring editors. Requirements It runs inside any webbrowser environment (starting at IE11 and up). For historical reference: Remixml was originally inspired by RXML, the Roxen webserver macro language. -- Stephen.

1 1

Re: Pike-devel Digest, Vol 173, Issue 3
by David Tapia 23 Jan '20

23 Jan '20

Hi all, Process.spawn has a vulnerability: Process spawn(string command, void|Stdio.Stream stdin, void|Stdio.Stream stdout, void|Stdio.Stream stderr, // These aren't used. Seems to be part of something unfinished. /mast //function|void cleanup, mixed ... args ) //! Spawns a process that executes @[command] as a command shell //! statement ("@expr{/bin/sh -c @[command]@}" for Unix, "@expr{cmd /c //! @[command]@}" for Windows). //! //! @param stdin //! @param stdout //! @param stderr //! Stream objects to use as standard input, standard output and //! standard error, respectively, for the created process. The //! corresponding streams for this process are used for those that //! are left out. //! //! @returns //! Returns a @[Process.Process] object for the created process. //! //! @seealso //! @[system], @[popen] { mapping(string:mixed) data=(["env":getenv()]); if(stdin) data->stdin=stdin; if(stdout) data->stdout=stdout; if(stderr) data->stderr=stderr; #if defined(__NT__) // if the command string command is not quoted, add double quotes to // make sure it is not modified by create_process if (sizeof(command) <= 1 || command[0] != '\"' || command[sizeof(command)-1] != '\"') command = "\"" + command + "\""; return Process(({ "cmd", "/c", command }),data); #elif defined(__amigaos__) return Process(split_quoted_string(command),data); #else /* !__NT__||__amigaos__ */ // return Process(({ "/bin/sh", "-c", /*command*/ }),data); // Fix ? *return Process(({ "/bin/sh", "-c" }) + split_quoted_string(command),data);* ** #endif /* __NT__||__amigaos__ */ } Regards El 23/1/20 a les 12:00, pike-devel-request(a)lists.lysator.liu.se ha escrit: > Send Pike-devel mailing list submissions to > pike-devel(a)lists.lysator.liu.se > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.lysator.liu.se/mailman/listinfo/pike-devel > or, via email, send a message with subject or body 'help' to > pike-devel-request(a)lists.lysator.liu.se > > You can reach the person managing the list at > pike-devel-owner(a)lists.lysator.liu.se > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Pike-devel digest..." > > > Today's Topics: > > 1. pike under sanitizers (Mike) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 23 Jan 2020 10:40:13 +0000 > From: "Mike" <tankf33der(a)disroot.org> > To: pike-devel(a)lists.lysator.liu.se > Subject: pike under sanitizers > Message-ID: <96b4ff652af97bf1d5d49b78dd71f602(a)disroot.org> > Content-Type: text/plain; charset="utf-8" > > hi all, > > I've compiled and run tests by clang with different sanitizers (address, memory, undefined). > If somebody wants to get report(s) and fix let me know. Some of them are trivial and make sense. > I'm already post announce on irc and sent mail to grubba@ without reply :) > > (mike) > > > End of Pike-devel Digest, Vol 173, Issue 3 > ******************************************

2 1

pike under sanitizers
by Mike 23 Jan '20

23 Jan '20

hi all, I've compiled and run tests by clang with different sanitizers (address, memory, undefined). If somebody wants to get report(s) and fix let me know. Some of them are trivial and make sense. I'm already post announce on irc and sent mail to grubba@ without reply :) (mike)

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

Pike-devel January 2020