Taint msgrcv() messages; general SysV IPC cleanup.

[p5sagit/p5-mst-13.2.git] / pod / perldelta.pod

diff --git a/pod/perldelta.pod b/pod/perldelta.pod
index 39bb033..d4d82f3 100644 (file)
--- a/pod/perldelta.pod
+++ b/pod/perldelta.pod
@@ -206,6 +206,19 @@ will produce different results on platforms that have different
 $Config{ivsize}.  For portability, be sure to mask off the excess bits
 in the result of unary C<~>, e.g., C<~$x & 0xffffffff>.
 
+=head2 The passwd and shell returned by the getpwxxx() are now tainted
+
+Because the user can affect her own encrypted password and login shell
+the password and shell returned by the getpwent(), getpwnam(), and
+getpwuid() functions are tainted.
+
+=head2 The msgrcv() and shmread() now taint
+
+Because other (untrusted) processes can modify messages and shared
+memory segments for their own nefarious purposes, the messages
+returned by msgrcv() (and its object-oriented interface,
+IPC::SysV::Msg::rcv) and the variable modified by shmread() are tainted.
+
 =back
 
 =head2 C Source Incompatibilities