Overview

Request 103733 accepted

- update to 1.05
* The XS code had a code path where it could pass the contents of a Perl
variable as the first argument to the XS croak() subroutine. This subroutine
is like printf(), and should receive a format string as its first
argument. According to RT #74777, this can lead to segfaults on some systems.
This could in theory be a security bug, but it's very unlikely that
untrusted user input could end up being passed to this croak(). It is called
when a spec specifies a "depend" value on another parameter. The value of
the "depend" parameter was passed in the first argument to croak().
1.04 2012-02-08
* Use the latest Module::XSOrPP dzil plugin to generate a saner Build.PL. No
need update if you're using an earlier version.
* This release uses Module::Implementation to handle loading the XS or pure
Perl implementation of Params::Validate.
1.02 2012-02-06
* The previous release never loaded the XS implementation, even if it had been
compiled.
* With newer versions of Perl, the pure Perl implementation treated regexp
objects differently than the XS implementation. They should be treated as
belonging to the SCALARREF type for backwards compatibility.
* These two bugs combined managed to break the test suites of a number of
modules on CPAN. This release should fix them.

- update to 1.01
- The generated Build.PL detects whether or not the machine it's run on has a
working compiler, and disables XS automatically if it doesn't. Fixes RT
#44719.

Request History
Vítězslav Čížek's avatar

vitezslav_cizek created request

- update to 1.05
* The XS code had a code path where it could pass the contents of a Perl
variable as the first argument to the XS croak() subroutine. This subroutine
is like printf(), and should receive a format string as its first
argument. According to RT #74777, this can lead to segfaults on some systems.
This could in theory be a security bug, but it's very unlikely that
untrusted user input could end up being passed to this croak(). It is called
when a spec specifies a "depend" value on another parameter. The value of
the "depend" parameter was passed in the first argument to croak().
1.04 2012-02-08
* Use the latest Module::XSOrPP dzil plugin to generate a saner Build.PL. No
need update if you're using an earlier version.
* This release uses Module::Implementation to handle loading the XS or pure
Perl implementation of Params::Validate.
1.02 2012-02-06
* The previous release never loaded the XS implementation, even if it had been
compiled.
* With newer versions of Perl, the pure Perl implementation treated regexp
objects differently than the XS implementation. They should be treated as
belonging to the SCALARREF type for backwards compatibility.
* These two bugs combined managed to break the test suites of a number of
modules on CPAN. This release should fix them.

- update to 1.01
- The generated Build.PL detects whether or not the machine it's run on has a
working compiler, and disables XS automatically if it doesn't. Fixes RT
#44719.


Factory Auto's avatar

factory-auto added a reviewer

please make sure to wait before these depencencies are in openSUSE:Factory: perl-Module-Implementation(rq103732)


Factory Auto's avatar

factory-auto added a reviewer

Please review sources


Factory Auto's avatar

factory-auto added a reviewer

Please review sources


Sascha Peilicke's avatar

saschpe approved review

Thanks


Stephan Kulow's avatar

coolo accepted request

checkin


Saul Goodman's avatar

licensedigger accepted review

{"approve": "preliminary, version number changed"}


Factory Auto's avatar

factory-auto accepted review

Builds for repo openSUSE_Factory


Sascha Peilicke's avatar

saschpe accepted review

Thanks


Sascha Peilicke's avatar

saschpe accepted review

Thanks

openSUSE Build Service is sponsored by