Re: why I will not use ActiveState again

They totally replaced File::Path with another implementation that has different bugs and the same version number

You're quite right - which surprised me. A diff of ActivePerl build 819 and perl 5.8.8 built from CPAN source produced (in part) the following:

-our $VERSION = "1.08";  # but modified for ActivePerl
+our $VERSION = "1.08";
[download]

I think they should have at least made mention of the modification in the File::Path documentation.

Cheers,
Rob

Comment on Re: why I will not use ActiveState again Download Code

Replies are listed 'Best First'.
Re^2: why I will not use ActiveState again by gisle (Novice) on Dec 01, 2006 at 23:18 UTC
You'll find the following note in the ActivePerl ChangeLog: * File::Path's rmtree() function has been replaced to address security vulnerability CAN-2005-0448. We have basically adopted the version from Debian Linux. BTW, we also publish this patch file that documents how the current ActivePerl differs from the official 5.8.8.	[reply]
Re^3: why I will not use ActiveState again by rjbs (Pilgrim) on Dec 02, 2006 at 14:02 UTC
Unfortunately, when someone comes to me and says, "Your module produces errors or warnings on my ActivePerl install," it's difficult for me to determine that it's because a core module several layers up the chain is different. I certainly don't want to consult that patch file for every recursively included module. The changed rmtree didn't just address some vulnerability, it introduced at least one new behavior, carping on [] as the first arg to rmtree. With a core that doesn't behave like the perl core, it's harder to support. The changes may be minor, but they're distracting and make debugging take significantly longer where it shouldn't, liked in pure Perl modules. As someone who tries to support every platform, I find it very frustrating. rjbs	[reply]
Re^4: why I will not use ActiveState again by syphilis (Archbishop) on Dec 02, 2006 at 14:35 UTC
it's difficult for me to determine that it's because a core module several layers up the chain is different I think that point of yours (along with the rest of your post) is fair enough. And I also think that ActiveState's decision to modify the module is fair enough. So ... let's get constructive about the issue ... what should they be doing (from the perspective of a module author) when they perceive a need to amend a core module ? Cheers, Rob	[reply]
Re^5: why I will not use ActiveState again (++$version) by tye (Sage) on Dec 02, 2006 at 16:09 UTC
Re^5: why I will not use ActiveState again by xdg (Monsignor) on Dec 04, 2006 at 05:36 UTC


Perl Monk, Perl Meditation
	PerlMonks