Taint shmread().

[p5sagit/p5-mst-13.2.git] / pod / perldelta.pod

diff --git a/pod/perldelta.pod b/pod/perldelta.pod
index 4ab402f..52a6fba 100644 (file)
--- a/pod/perldelta.pod
+++ b/pod/perldelta.pod
@@ -206,6 +206,18 @@ will produce different results on platforms that have different
 $Config{ivsize}.  For portability, be sure to mask off the excess bits
 in the result of unary C<~>, e.g., C<~$x & 0xffffffff>.
 
+=head2 The passwd and shell returned by the getpwxxx() are now tainted
+
+Because the user can affect her own encrypted password and login shell
+the password and shell returned by the getpwent(), getpwnam(), and
+getpwuid() functions are tainted.
+
+=head2 The shmread() now taints its variable
+
+Because other (untrusted) processes can modify shared memory segments
+for their own nefarious purposes, the variable modified by shmread()
+becomes tainted.
+
 =back
 
 =head2 C Source Incompatibilities
@@ -2641,6 +2653,13 @@ known as Open Edition MVS) and VM-ESA were supported.  Due to the
 changes required by the UTF-8 (Unicode) support in Perl 5.6 the EBCDIC
 platforms are not supported in Perl 5.6.0.
 
+=head2 NEXTSTEP 3.3 POSIX test failure
+
+In NEXTSTEP 3.3p2 the implementation of the strftime(3) in the
+operating system libraries is buggy: the %j format numbers the days of
+a month starting from zero, which, while being logical to programmers,
+will cause the subtests 19 to 27 of the lib/posix test may fail.
+
 =head2 UNICOS/mk CC failures during Configure run
 
 In UNICOS/mk the following errors may appear during the Configure run: