rpm/perl
SHA256
1
0
Fork 0
forked from pool/perl
Code Pull Requests Activity
5bcc789275
perl/perl-regexp-refoverflow.diff

14 lines
474 B
Diff
Raw Normal View History

Accepting request 494775 from home:coolo:branches:openSUSE:Factory - Fix building with zlib-1.2.10 (RT#119762): * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch - Update to perl-5.24.1 -Di switch is now required for PerlIO debugging output Previously PerlIO debugging output would be sent to the file specified by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid and the -T or -t switches hadn't been parsed yet. If perl performed output at a point where it hadn't yet parsed its switches this could result in perl creating or overwriting the file named by "PERLIO_DEBUG" even when the -T switch had been supplied. Perl now requires the -Di switch to produce PerlIO debugging output. By default this is written to "stderr", but can optionally be redirected to a file by setting the "PERLIO_DEBUG" environment variable. If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG" is ignored and the debugging output is sent to "stderr" as for any other -D switch. Core modules and tools no longer search "." for optional modules The tools and many modules supplied in core no longer search the default current directory entry in @INC for optional modules. For example, Storable will remove the final "." from @INC before trying to load Log::Agent. This prevents an attacker injecting an optional module into a process run by another user where the current directory is writable by the attacker, e.g. the /tmp directory. - Refresh patches OBS-URL: https://build.opensuse.org/request/show/494775 OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl?expand=0&rev=148
2017-05-17 12:00:29 +02:00
Index: regcomp.c
===================================================================
--- regcomp.c.orig
+++ regcomp.c
- update to perl-5.26.1 * [CVE-2017-12837] Heap buffer overflow in regular expression compiler * [CVE-2017-12883] Buffer over-read in regular expression parser * tons of bug fixes - update list of obsoletes OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl?expand=0&rev=152
2017-09-23 14:12:52 +02:00
@@ -10988,7 +10988,7 @@ S_reg(pTHX_ RExC_state_t *pRExC_state, I
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/perl?expand=0&rev=21
2008-08-21 18:46:31 +02:00
Accepting request 313011 from home:hsk17:branches:devel:languages:perl update to 5.22.0 regarding the .spec file: i have updated the "(Provides|Obsoletes): perl-*" directives to reflect the module versions provided by perl-5.22.0. but only for the modules that already were mentioned in the .spec file. i cannot judge why these are in the .spec file while many others are not. OBS-URL: https://build.opensuse.org/request/show/313011 OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl?expand=0&rev=130
2015-06-23 21:23:16 +02:00
ret = reg2Lanode(pRExC_state, GOSUB, num, RExC_recurse_count);
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/perl?expand=0&rev=21
2008-08-21 18:46:31 +02:00
if (!SIZE_ONLY) {
- if (num > (I32)RExC_rx->nparens) {
+ if (num < 0 || num > (I32)RExC_rx->nparens) {
RExC_parse++;
vFAIL("Reference to nonexistent group");
}
Copy Permalink