- updated to 1.13 (excerpt from upstream Changes file):
1.13 2014-06-28
- Fix my brain damage so that this code compiles with Perl 5.14.
1.12 2014-06-27
- Temporarily skip tests that use Readonly with Readonly 1.50+ until various
bugs are worked out in Readonly.
1.11 2014-06-26
- Fixes for MSVC compilation. Patch by J.R. Mash. PR #1.
1.10 2014-05-11
- Require Readonly 1.03+ and Scalar::Util 1.20 for testing with
Readonly. AFAICT, earlier versions of Readonly worked very differently,
and/or this is related to Scalar::Util. Either way, this test isn't that
important anyway. RT #95402.
1.09 2014-05-04
- A call to validate() where the spec was a reference to a Readonly hash would
segfault. Reported by Salvatore Bonaccorso. RT #80572.
- When using the XS implementation, attempting to validate parameters with
tainted values would cause an "Insecure dependency in eval_sv() while
running with -T switch" exception from Perl *if the validation failed*. This
is fixed, but only for Perl 5.14+. Older Perls do not include the necessary
XS API. RT #70174.
- Fixed some potential segfaults from the XS implementation including the one
reported by Анатолий Гришаев in RT #50412. However, the XS code in general
is pretty crufty and tends to assume that values which could be NULL aren't.
- Fixed bad example of state() in POD. Reported by Salvatore Bonaccorso. RT
#80250.
1.08 2013-06-07
- The handling of defaults in the XS version of validate_pos was broken. The
default were simply pushed into the returned array, rather than being
explicitly stored in the right index based on the order of the specs passed
OBS-URL: https://build.opensuse.org/request/show/243183
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl-Params-Validate?expand=0&rev=33
- update to 1.05
* The XS code had a code path where it could pass the contents of a Perl
variable as the first argument to the XS croak() subroutine. This subroutine
is like printf(), and should receive a format string as its first
argument. According to RT #74777, this can lead to segfaults on some systems.
This could in theory be a security bug, but it's very unlikely that
untrusted user input could end up being passed to this croak(). It is called
when a spec specifies a "depend" value on another parameter. The value of
the "depend" parameter was passed in the first argument to croak().
1.04 2012-02-08
* Use the latest Module::XSOrPP dzil plugin to generate a saner Build.PL. No
need update if you're using an earlier version.
* This release uses Module::Implementation to handle loading the XS or pure
Perl implementation of Params::Validate.
1.02 2012-02-06
* The previous release never loaded the XS implementation, even if it had been
compiled.
* With newer versions of Perl, the pure Perl implementation treated regexp
objects differently than the XS implementation. They should be treated as
belonging to the SCALARREF type for backwards compatibility.
* These two bugs combined managed to break the test suites of a number of
modules on CPAN. This release should fix them.
- update to 1.01
- The generated Build.PL detects whether or not the machine it's run on has a
working compiler, and disables XS automatically if it doesn't. Fixes RT
#44719.
OBS-URL: https://build.opensuse.org/request/show/103733
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/perl-Params-Validate?expand=0&rev=26
* The XS code had a code path where it could pass the contents of a Perl
variable as the first argument to the XS croak() subroutine. This subroutine
is like printf(), and should receive a format string as its first
argument. According to RT #74777, this can lead to segfaults on some systems.
This could in theory be a security bug, but it's very unlikely that
untrusted user input could end up being passed to this croak(). It is called
when a spec specifies a "depend" value on another parameter. The value of
the "depend" parameter was passed in the first argument to croak().
1.04 2012-02-08
* Use the latest Module::XSOrPP dzil plugin to generate a saner Build.PL. No
need update if you're using an earlier version.
* This release uses Module::Implementation to handle loading the XS or pure
Perl implementation of Params::Validate.
1.02 2012-02-06
* The previous release never loaded the XS implementation, even if it had been
compiled.
* With newer versions of Perl, the pure Perl implementation treated regexp
objects differently than the XS implementation. They should be treated as
belonging to the SCALARREF type for backwards compatibility.
* These two bugs combined managed to break the test suites of a number of
modules on CPAN. This release should fix them.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl-Params-Validate?expand=0&rev=29
