The -e1 is unnecessary.

$ perl -MO=Deparse -i'foo e eval "warn q[bar]";'
BEGIN { $^I = "foo"; }
eval 'warn q[bar]';
-e syntax OK
[download]

I vote bug.

The -e1 is unnecessary.

That seems to be because perl sees the 'e' in 'foo e eval...' as an -e command line switch. Change it to something else besides 'e' and the behavior changes.

It sort of feels like the same sort of exploit one should worry about when using the two-arg open unsafely, passing user data to a database without placeholders, or instantiating user data as variable names.




Dave

Yes, but to me that is THE bug.

---
$world=~s/war/peace/g

The -e1 is unnecessary.

Yes, sorry. I should have explained my intent... I was showing that by adding the ';' to the OP's you could include -e1 without an error.

-sauoq
"My two cents aren't worth a dime.";

I think you found a real bug. And, sure, there are security implications. Theoretically, anyway. There are probably not that many places where this poses a real security threat. There's more potential for it to cause things to break and leave people scratching their heads though.

-sauoq
"My two cents aren't worth a dime.";