Overview
Request 103733 accepted
- update to 1.05
* The XS code had a code path where it could pass the contents of a Perl
variable as the first argument to the XS croak() subroutine. This subroutine
is like printf(), and should receive a format string as its first
argument. According to RT #74777, this can lead to segfaults on some systems.
This could in theory be a security bug, but it's very unlikely that
untrusted user input could end up being passed to this croak(). It is called
when a spec specifies a "depend" value on another parameter. The value of
the "depend" parameter was passed in the first argument to croak().
1.04 2012-02-08
* Use the latest Module::XSOrPP dzil plugin to generate a saner Build.PL. No
need update if you're using an earlier version.
* This release uses Module::Implementation to handle loading the XS or pure
Perl implementation of Params::Validate.
1.02 2012-02-06
* The previous release never loaded the XS implementation, even if it had been
compiled.
* With newer versions of Perl, the pure Perl implementation treated regexp
objects differently than the XS implementation. They should be treated as
belonging to the SCALARREF type for backwards compatibility.
* These two bugs combined managed to break the test suites of a number of
modules on CPAN. This release should fix them.
- update to 1.01
- The generated Build.PL detects whether or not the machine it's run on has a
working compiler, and disables XS automatically if it doesn't. Fixes RT
#44719.
- Created by vitezslav_cizek
- In state accepted
Request History
vitezslav_cizek created request
- update to 1.05
* The XS code had a code path where it could pass the contents of a Perl
variable as the first argument to the XS croak() subroutine. This subroutine
is like printf(), and should receive a format string as its first
argument. According to RT #74777, this can lead to segfaults on some systems.
This could in theory be a security bug, but it's very unlikely that
untrusted user input could end up being passed to this croak(). It is called
when a spec specifies a "depend" value on another parameter. The value of
the "depend" parameter was passed in the first argument to croak().
1.04 2012-02-08
* Use the latest Module::XSOrPP dzil plugin to generate a saner Build.PL. No
need update if you're using an earlier version.
* This release uses Module::Implementation to handle loading the XS or pure
Perl implementation of Params::Validate.
1.02 2012-02-06
* The previous release never loaded the XS implementation, even if it had been
compiled.
* With newer versions of Perl, the pure Perl implementation treated regexp
objects differently than the XS implementation. They should be treated as
belonging to the SCALARREF type for backwards compatibility.
* These two bugs combined managed to break the test suites of a number of
modules on CPAN. This release should fix them.
- update to 1.01
- The generated Build.PL detects whether or not the machine it's run on has a
working compiler, and disables XS automatically if it doesn't. Fixes RT
#44719.
factory-auto added a reviewer
please make sure to wait before these depencencies are in openSUSE:Factory: perl-Module-Implementation(rq103732)
factory-auto added a reviewer
Please review sources
factory-auto added a reviewer
Please review sources
saschpe approved review
Thanks
coolo accepted request
checkin
licensedigger accepted review
{"approve": "preliminary, version number changed"}
factory-auto accepted review
Builds for repo openSUSE_Factory
saschpe accepted review
Thanks
saschpe accepted review
Thanks