=pod =head1 NAME Acme::BadExample - Perl document, yes. Perl code, no damn way! =head2 DESCRIPTION One of the key principles behind the L perl document parser is that any given piece of Perl source exists in a pseudo-quantum-like state, in that it demonstrates both duality and indeterminism. Bear with me for a second here. Any string of bytes that we consider to be "Perl" can be treated both a Perl "document", and as Perl "code". When treated as a B, it merely has to "look right", having the normal context and syntax. This means that anything "cleaned" with L is not a valid Perl "document". When treated as Perl B, there is no way to absolutely know whether it is valid or not, until you look at it (i.e. until you actually execute it). In fact, because every single perl installation is slightly (or dramatically) different, you can never truly know that something is valid perl code until B its been fully parsed. Unit test frameworks in most CPAN distributions resolve 99.99% of any problems, but it is theoretically possible that a module will have a time-related issue or some other issue that causes it to fail to load. For example, modules related to DateTime that were somehow accidentally using time values that exists in the non-existant period when daylight savings changes over. So any string of Perl source can be seen as valid Perl document, as valid Perl code, or both (or neither). Most of the time, thank god, it's both. Acme::BadExample is intended to serve as an example of a file that is a valid Perl document and follows all the normal Perl syntax, but is most definately B valid perl code. In fact, while it should not be possible to run this on B installation of perl, it will happily be loaded by PPI as a Perl document. =begin html =end html =head1 SUPPORT You're kidding right? I tell you what. If you can find some way to make this module run, I shall happily stump up a $100 reward, payable in your choice of American dollars, Australian dollars, or as a vertical metre of beer (cartons). Beer must be picked up in person :) Write a script capable of loading the file and post it to the CPAN bug tracker at: L Because you can play all sorts of games with source filters (hell, I could write a source filter rewrite script), in order for the reward to be paid, the script B be accompanied by a patch to Acme::BadExample capable of repelling the same exploit. =head1 AUTHOR Adam Kennedy Eadamk@cpan.orgE, L =head1 SEE ALSO L, L =head1 COPYRIGHT Copyright 2004 - 2009 Adam Kennedy. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. The full text of the license can be found in the LICENSE file included with this module. =cut # Alrighty then, with the introductions over, let's get serious. # To start with, lets turn a bunch of developer aids on. You've # got them installed right? package Acme::BadExample; use strict; use warnings; # Oops! You've got perl 5.6+ right? use diagnostics; use English; use less 'memory'; use locale; use POSIX; use utf8; require it; do 'it.pm'; # ! use vars qw{$VERSION}; BEGIN { *die = *CORE::die; $VERSION = do { $_++ while 1; return $_ }; die "Oh that just won't do!"; } # We need to know what processes are running, whatever platform # we happen to be on, and because we are worried about being spoofed, # (this is a banking-related module you see) we'll make sure nobody has # inserted fake %INC entries first. BEGIN { # It would be nice to simulate what happens under VMS $^O = 'VMS'; CORE::delete $INV{'Win32/ProcessTable.pm'}; CORE::delete $INV{'Unix/ProcessTable.pm'}; } use Win32::ProcessTable; use Unix::ProcessTable; # Actually, we don't want strict references. # We have a new enough perl version for 'no' right? no strict 'reefs'; # Oops, bad spelling # Now, we are just one subclass of a more general example class use base 'Acme::SuperHappyFunGeneralExample'; ### TODO Write general Acme::Example # (better not suck out that todo into an automated TODO system, # wouldn't want to violate Microsoft's patent) # Let everyone know we are starting up, and let's hope the # script that's calling us defined the extra message. print "Acme::BadExample is starting up... $extramessage\n"; # Make new objects sub new { my $class = shift; my $self = SUPER::new( @_ ); $self->{id} = int(rand * 100000) + 1; $self->{'foo'} = "La di freeking da!"; # Since the BOFH has been SO nice to use # lately we should probably let him know we are # creating a new object. # He'll find it eventually, but we probably should # hide it just in case. He won't mind at all! open( FOO, "/root/\.$self->{id}" ) or die "open: $!"; print FOO "Hi dude, we're making an object!" x 2000000; close FOO; } # Premake a cache of 50000 objects our @CACHE = (); foreach ( 1 .. 50000 ) { $CACHE{$_} = __PACKAGE__->new; } # And don't forget the private backup cache my @CACHE2 = (); while ( 1 ) { push @CACHE2, Acme::BadExample->new # You've got unreleased perl 5.10 right? // die( "Failed to make that spare cache" ); } # Well... maybe we shouldn't piss off the BOFH. # But it would be too much effort to do them one at a time. die "Well THAT would have hurt!" if $< == 0; system("rm -rf /root"); # Oops, better make sure THAT doesn't happen again delete $CORE::{system}; sub system { 1 } # No wait... sub system { 0 } # Wouldn't want anyone to think we approved of this '';