Re: Re: Security problem in SOAP::Lite

[larryk]

in reply to Re: Security problem in SOAP::Lite
in thread Security problem in SOAP::Lite

Frontier::RPC2 is not vulnerable as the server must be initialised with named functions/subrefs:

# from perldoc Frontier::Daemon
SYNOPSIS
    
    use Frontier::Daemon;
    
    Frontier::Daemon->new(methods => {
        'rpcName' => \&sub_name,
           ...
        });

which are executed after the following check:

# from Frontier::RPC2
my $method = $call->{'method_name'};
if (!defined $methods->{$method}) {
    return $self->encode_fault(3, "no such method \`$method'\n");
}

   larryk                                          
perl -le "s,,reverse killer,e,y,rifle,lycra,,print"