- updated to 1.13 (excerpt from upstream Changes file):
1.13 2014-06-28
- Fix my brain damage so that this code compiles with Perl 5.14.
1.12 2014-06-27
- Temporarily skip tests that use Readonly with Readonly 1.50+ until various
bugs are worked out in Readonly.
1.11 2014-06-26
- Fixes for MSVC compilation. Patch by J.R. Mash. PR #1.
1.10 2014-05-11
- Require Readonly 1.03+ and Scalar::Util 1.20 for testing with
Readonly. AFAICT, earlier versions of Readonly worked very differently,
and/or this is related to Scalar::Util. Either way, this test isn't that
important anyway. RT #95402.
1.09 2014-05-04
- A call to validate() where the spec was a reference to a Readonly hash would
segfault. Reported by Salvatore Bonaccorso. RT #80572.
- When using the XS implementation, attempting to validate parameters with
tainted values would cause an "Insecure dependency in eval_sv() while
running with -T switch" exception from Perl *if the validation failed*. This
is fixed, but only for Perl 5.14+. Older Perls do not include the necessary
XS API. RT #70174.
- Fixed some potential segfaults from the XS implementation including the one
reported by Анатолий Гришаев in RT #50412. However, the XS code in general
is pretty crufty and tends to assume that values which could be NULL aren't.
- Fixed bad example of state() in POD. Reported by Salvatore Bonaccorso. RT
#80250.
1.08 2013-06-07
- The handling of defaults in the XS version of validate_pos was broken. The
default were simply pushed into the returned array, rather than being
explicitly stored in the right index based on the order of the specs passed
OBS-URL: https://build.opensuse.org/request/show/243183
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl-Params-Validate?expand=0&rev=33
- update to 1.05
* The XS code had a code path where it could pass the contents of a Perl
variable as the first argument to the XS croak() subroutine. This subroutine
is like printf(), and should receive a format string as its first
argument. According to RT #74777, this can lead to segfaults on some systems.
This could in theory be a security bug, but it's very unlikely that
untrusted user input could end up being passed to this croak(). It is called
when a spec specifies a "depend" value on another parameter. The value of
the "depend" parameter was passed in the first argument to croak().
1.04 2012-02-08
* Use the latest Module::XSOrPP dzil plugin to generate a saner Build.PL. No
need update if you're using an earlier version.
* This release uses Module::Implementation to handle loading the XS or pure
Perl implementation of Params::Validate.
1.02 2012-02-06
* The previous release never loaded the XS implementation, even if it had been
compiled.
* With newer versions of Perl, the pure Perl implementation treated regexp
objects differently than the XS implementation. They should be treated as
belonging to the SCALARREF type for backwards compatibility.
* These two bugs combined managed to break the test suites of a number of
modules on CPAN. This release should fix them.
- update to 1.01
- The generated Build.PL detects whether or not the machine it's run on has a
working compiler, and disables XS automatically if it doesn't. Fixes RT
#44719.
OBS-URL: https://build.opensuse.org/request/show/103733
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/perl-Params-Validate?expand=0&rev=26
* The XS code had a code path where it could pass the contents of a Perl
variable as the first argument to the XS croak() subroutine. This subroutine
is like printf(), and should receive a format string as its first
argument. According to RT #74777, this can lead to segfaults on some systems.
This could in theory be a security bug, but it's very unlikely that
untrusted user input could end up being passed to this croak(). It is called
when a spec specifies a "depend" value on another parameter. The value of
the "depend" parameter was passed in the first argument to croak().
1.04 2012-02-08
* Use the latest Module::XSOrPP dzil plugin to generate a saner Build.PL. No
need update if you're using an earlier version.
* This release uses Module::Implementation to handle loading the XS or pure
Perl implementation of Params::Validate.
1.02 2012-02-06
* The previous release never loaded the XS implementation, even if it had been
compiled.
* With newer versions of Perl, the pure Perl implementation treated regexp
objects differently than the XS implementation. They should be treated as
belonging to the SCALARREF type for backwards compatibility.
* These two bugs combined managed to break the test suites of a number of
modules on CPAN. This release should fix them.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl-Params-Validate?expand=0&rev=29
- update to 0.98
- Attribute::Params::Validate's $VERSION regressed in 0.96.
It's now manually set to 1.07.
- update to 0.97
- The XS version of the code always called Carp::confess, regardless of
whether you provided your own on_fail callback. Reported by Scott Bolte. RT
#66359.
- There were a couple spots that called eval without localizing $@ first. RT
#58087.
- The parameters for each key validation (can, isa, regex) are now checked,
and an error is thrown if any of the keys are not valid. Basically, we
validate the validation spec. Based on a patch by Andreas Faafeng. RT
#57831.
- This module now requires Perl 5.8.1.
- Switched to version 2.0 of the Artistic License.
OBS-URL: https://build.opensuse.org/request/show/68353
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/perl-Params-Validate?expand=0&rev=17
