/ 
Lucy-0.3.2
/ Clownfish::CFC::Binding::Perl::Constructor
Security Advisories (4)
CVE-2026-61485 (2026-08-05)

Apache Lucy: Freezer/InStream deserialization bomb - unbounded allocation reading an index ** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2026-61484 (2026-08-05)

Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS ** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2026-61483 (2026-08-05)

Apache Lucy: QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoS ** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2026-61486 (2026-08-05)

Apache Lucy: stack-buffer-overflow in JSON parser error reporter on malformed input ** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

NAME

Clownfish::CFC::Binding::Perl::Constructor - Binding for an object method.

DESCRIPTION

This class isa Clownfish::CFC::Binding::Perl::Subroutine -- see its documentation for various code-generating routines.

Constructors are always bound to accept labeled params, even if there is only a single argument.

METHODS

new

my $constructor_binding = Clownfish::CFC::Binding::Perl::Constructor->new(
    class => $class,
    alias => "_new|init2",
);

  • class - A Clownfish::CFC::Class.

  • alias - A specifier for the name of the constructor, and optionally, a specifier for the implementing function. If alias has a pipe character in it, the text to the left of the pipe will be used as the Perl alias, and the text to the right will be used to determine which C function should be bound. The default function is "init".

xsub_def

Generate the XSUB code.