[Beattie] Beattie, Malcolm. B::Lint.
Comprehensive Perl Archive Network,
http://search.cpan.org/~nwclark/perl-5.8.8/ext/B/B/Lint.pm, Perl.org (2011).
| Anchor |
|---|
| Birznieks 1998 |
|---|
| Birznieks 1998 |
|---|
|
[Birznieks 1998] Birznieks, Gunther, CGI/Perl Taint Mode FAQ, Version 1.0, June 3, 1998.
[CGI 2005] CGI.pm: A Perl5 CGI Library, Function-Oriented vs Object-Oriented Use.
| Anchor |
|---|
| Christey 2005 |
|---|
| Christey 2005 |
|---|
|
[Christey 2005] Christey, Steven M. Format String Vulnerabilities in Perl Programs (Full Disclosure mailing list archives), 2005 .
[Conway 2005] Conway, Damian.
Perl Best Practices, O'Reilly Media, 2005, ISBN: 978-0596001735.
[IMS 2010] Imaginative Software Systems. Perl::Critic, v. 1.116.
Comprehensive Perl Archive Network,
http://www.cpan.org, Perl.org (2011).
| Anchor |
|---|
| Garfinkel 1996 |
|---|
| Garfinkel 1996 |
|---|
|
[Garfinkel 1996] Garfinkel, Simson, & Spafford, Gene. Practical UNIX & Internet Security, 2nd Edition. Sebastopol, CA: O'Reilly Media, April 1996 (ISBN 1-56592-148-8).
[Gough 2005] Gough, Brian J. An Introduction to GCC. Network Theory Ltd, Revised August 2005 (ISBN 0-9541617-9-3).
[Howard 2002] Howard, Michael, & LeBlanc, David C. Writing Secure Code, 2nd ed. Redmond, WA: Microsoft Press, 2002.
| Anchor |
|---|
| IEEE 754 2006 |
|---|
| IEEE 754 2006 |
|---|
|
[IEEE 754 2006] IEEE. Standard for Binary Floating-Point Arithmetic (IEEE 754-1985), 2006.
[Lester 2006] Lester, Andy, "Perl's taint mode to the rescue," O'Reilly OULamp.com, November 17, 2006.
[Meta CPAN]
Meta::CPAN,
| Anchor |
|---|
| Open Group 08 |
|---|
| Open Group 08 |
|---|
|
[Open Group 08] IEEE.
The Open Group Base Specifications Issue 7, IEEE Std 1003.1, 2008 edition.
| Anchor |
|---|
| Schwartz 2000 |
|---|
| Schwartz 2000 |
|---|
|
[Schwartz 2000] Schwartz, Randal L, "Taint checking made simple," Unix Review Column 33 (Aug 2000), Stonehenge, the Perl Review.
[Seacord 2005] Robert C. Seacord, Secure Coding in C and C++, Addison-Wesley Professional, Boston, 2005.
[VU#282403] AdCycle does not adequately validate user input thereby allowing for SQL injection. US CERT Vulnerability Note,2002.
[VU#671444] Input validation error in quikstore.cgi allows attackers to execute commands, US CERT Vulnerability Note, 2002.
[VU#948385] Perl contains an integer sign error in format string processing, US CERT Vulnerability Note, 2005.
[Wall 2011] Wall, Larry.
Perl 5 version 14.1 Manual Pages,
http://perldoc.perl.org/ (1995–2011).
