Comment 4 for bug 1854849

Revision history for this message
Mark Morlino (markmorlino) wrote :

I reviewed libscalar-list-utils-perl 1:1.53-1 as checked into focal. This shouldn't be
considered a full audit but rather a quick gauge of maintainability.
The guts of this perl module is in ListUtil.xs which is turned into C code. I did run that
portion of the build through coverity, which did not complain about anything I found to be
concerning.

libscalar-list-utils-perl is a replacement for the default List::Util distribution that
is built into perl core and adds some additional subroutines.

- CVE History:
  - no CVEs found
- Build-Depends:
  - perl
- pre/post inst/rm scripts?
  - not applicable
- init scripts?
  - not applicable
- systemd units?
  - not applicable
- dbus services?
  - not applicable
- setuid binaries?
  - not applicable
- binaries in PATH?
  - not applicable
- sudo fragments?
  - not applicable
- udev rules?
  - not applicable
- unit tests / autopkgtests?
  - there is a fairly comprehensive test suite
- cron jobs?
  - not applicable
- Build logs:
  - Everything looks fine
- Processes spawned?
  - not applicable
- Memory management?
  - I do not see anything that looks problematic
- File IO?
  - not applicable
- Logging?
  - not applicable
- Environment variable usage?
  - not applicable
- Use of privileged functions?
  - not applicable
- Use of cryptography / random number sources etc?
  - not applicable
- Use of temp files?
  - not applicable
- Use of networking?
  - not applicable
- Use of WebKit?
  - not applicable
- Use of PolicyKit?
  - not applicable

- Any significant cppcheck results?
  - not applicable
- Any significant Coverity results?
  - not applicable

Security team ACK for promoting libscalar-list-utils-perl to main.