On 2013/10/19 David Prévot wrote:
[...]
> Please find attached a minimal test case that could make it into t/data-20:
>
>   po4a-gettextize -f sgml -o force -m debiandoc.sgml -p debiandoc.po
>
> It currently gives random results.

Hello David,

Thanks, your example is very useful.  I made some changes in po4a in
order to have attributes in the same order as in input file, but then
realized that SGMLS.pm itself returns attributes in random order, so
there is no hope here :-(

Please have a look at
  http://perldoc.perl.org/perlsec.html#Algorithmic-Complexity-Attacks
I suggest to run po4a with
  PERL_PERTURB_KEYS=0 PERL_HASH_SEED=0
it should give the same output as before.

At the moment I have no better idea.  I could sort attributes to avoid
this randomization, but I would really like to preserve attributes
order.

Denis


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to