aboutsummaryrefslogtreecommitdiff
path: root/lang/perl/Makefile
Commit message (Collapse)AuthorAge
* perl: securely handle duplicate environment variables [CVE-2016-2381]Jo-Philipp Wich2016-03-01
| | | | | | | | | | | | | | | | | | | | | | | | | | Stephane Chazelas discovered a bug in the environment handling in Perl. Perl provides a Perl-space hash variable, %ENV, in which environment variables can be looked up. If a variable appears twice in envp, only the last value would appear in %ENV, but getenv would return the first. Perl's taint security mechanism would be applied to the value in %ENV, but not to the other rest of the environment. This could result in an ambiguous environment causing environment variables to be propagated to subprocesses, despite the protections supposedly offered by taint checking. With this update Perl changes the behavior to match the following: a) %ENV is populated with the first environment variable, as getenv would return. b) Duplicate environment entries are removed. References: * http://perl5.git.perl.org/perl.git/commit/ae37b791a73a9e78dedb89fb2429d2628cf58076 * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2381 Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
* Merge pull request #2267 from jow-/CVE-2015-8607Naoir2016-01-23
|\ | | | | perl: ensure File::Spec::canonpath() preserves taint [CVE-2015-8607]
| * perl: ensure File::Spec::canonpath() preserves taint [CVE-2015-8607]Jo-Philipp Wich2016-01-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Beginning in PathTools 3.47 and/or perl 5.20.0, the File::Spec::canonpath() routine returned untained strings even if passed tainted input. This defect undermines the guarantee of taint propagation, which is sometimes used to ensure that unvalidated user input does not reach sensitive code. This defect was found and reported by David Golden of MongoDB, and a patch was provided by Tony Cook. References: * https://rt.perl.org/Public/Bug/Display.html?id=126862 * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8607 Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
* | treewide: use $(STAGING_DIR)/host instead of $(STAGING_DIR_HOST), sync with ↵Felix Fietkau2016-01-20
|/ | | | | | changes in trunk Signed-off-by: Felix Fietkau <nbd@openwrt.org>
* perl: Update to 5.22.1Marcel Denia2015-12-21
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Fix uClibc handlingMarcel Denia2015-11-30
| | | | | | | Configuration scripts expect the libc identifier to be "uclibc" in case we're using it, OpenWrt provides "uClibc". Oh well... Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Set gccversion configuration symbol correctlyMarcel Denia2015-11-29
| | | | | | | | | This was previously manually set to '4.8.0'. Aside from just being incorrect, it also breaks Errno's GCC5 detection. Fixes #2044. Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Bump PKG_RELEASEMarcel Denia2015-11-20
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Bump PKG_RELEASEMarcel Denia2015-09-25
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Bump PKG_RELEASEMarcel Denia2015-09-01
| | | | | | | | | | | | | | | | | | | | Despite being just a packaging update, this update packs quite a few changes. To start things off, we're finally passing perl's testsuite on at least x86/musl. There are a lot of skipped tests left, as well as some oddities. Nothing too heavy though. Making this happen was an ongoing effort since the perl-5.20.1 release. We still can't run module testsuites and I don't expect all target/libc combinations to pass yet. So we'll leave test suite support marked as experimental. We've also switched from the old collection of target-specific configuration files to a new, more flexible and easier-to-maintain system based on perlconfig.pl. It'll generate a suitable configuration file using information found in it's *.config files as well as command-line parameters passed. See the POD and files/README.config for details. Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Include vmsish.t and Internals.t in perl-tests-commonMarcel Denia2015-09-01
| | | | | | There is no other place for them really. Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Disable OS/2 testsMarcel Denia2015-09-01
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Switch to split configuration filesMarcel Denia2015-09-01
| | | | | | | | | | | | This replaces the previously used collection of configuration files for every single architecture in conjunction with hacky overrides, which became an increasing burden to maintain. Fixes a number of outstanding bugs and oddities, with the most important one being the previously wrong signal order(as shown by ext/POSIX/t/sigaction.t). See files/perlconfig.pl's POD and files/README.config for details. Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Update to 5.22.0Marcel Denia2015-06-18
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Disable strerror_r usage with muslMarcel Denia2015-06-18
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Have perl's major version number in one central placeMarcel Denia2015-06-18
| | | | | | This will simplify updating the package in the future. Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: fix musl compatibilityJo-Philipp Wich2015-06-17
| | | | | | | | | | | | | | - Add patch to inhibit the libm IEEE math switch on musl - Add postprocessing for config.sh to the Makefile to fixup defines for musl, idea taken from http://patchwork.openembedded.org/patch/91707/ This is the least invasive approach I could come up to fix the build failure asap. Another possibility is maintaining yet another set of musl specific architecture config files, but I think that this introduces a lot of maintenance overhead. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
* perl: Bump PKG_RELEASEMarcel Denia2015-05-27
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Enable threading in host-perl as well if threading is selectedMarcel Denia2015-05-27
| | | | | | | | | | | | | | While host-perl only exists to run build scripts(and thus, should have no influence on built packages at all), most packages depend heavily on the feature set of the perl installation that ran their configuration scripts. This change makes them see that threading support is enabled(if it actually is selected). We can't use configuration symbol overrides for this one, as they are visible to host-perl as well. Using overrides would make it act as if it had threading support enabled without actually having it. Signed-off-by: Marcel Denia <naoir@gmx.net>
* global: change all instances of USE_EGLIBC to USE_GLIBCJohn Crispin2015-03-12
| | | | Signed-off-by: John Crispin <blogic@openwrt.org>
* perl: Update to 5.20.2Marcel Denia2015-02-16
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Bump PKG_RELEASEMarcel Denia2015-02-07
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Bump PKG_RELEASEMarcel Denia2015-02-04
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: CleanupMarcel Denia2015-02-04
| | | | | | | | - Update copyright notice - Make perlbase-experimental's TITLE show up in menuconfig again - Formatting changes Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Add new CONFIG_PERL_THREADS option for enabling threading supportMarcel Denia2015-02-04
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Bump PKG_RELEASEMarcel Denia2015-01-10
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Update to 5.20.1Marcel Denia2014-11-06
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Update perlbase.mkMarcel Denia2014-11-06
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Add basic test supportMarcel Denia2014-11-06
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Bump PKG_RELEASEMarcel Denia2014-10-16
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: create the Host install path before using itJohn Crispin2014-08-31
| | | | | | this caused a compile fail on the BB builder Signed-off-by: John Crispin <blogic@openwrt.org>
* perl: Update license identifiers to match SPDXMarcel Denia2014-08-14
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Bump PKG_RELEASEMarcel Denia2014-08-14
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Unify host and target build directoriesMarcel Denia2014-08-14
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Include installed extensions in host-perlMarcel Denia2014-08-14
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Install libperl.soMarcel Denia2014-08-14
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Install full /usr/lib/perl5 tree into STAGING_DIRMarcel Denia2014-08-14
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: Bump PKG_RELEASEMarcel Denia2014-07-24
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: CleanupMarcel Denia2014-07-23
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: Update license informationMarcel Denia2014-07-23
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: Install target headers to staging directoryMarcel Denia2014-07-22
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: Filter -g3 in TARGET_CFLAGSMarcel Denia2014-07-21
| | | | | | | | | | | | | -g3 will make the build fail in Compress-Raw-Zlib with ld: final link failed: Memory exhausted This bug is actually documented[1] and fixed by filtering that flag. Since we're passing CFLAGS manually, we need to do the same to make things work. I suspect that this is actually a linker or library bug, but for now let's just replicate the official fix. [1] https://rt.cpan.org/Public/Bug/Display.html?id=88936 Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: Bump PKG_RELEASEMarcel Denia2014-07-20
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: Bump PKG_RELEASEMarcel Denia2014-07-19
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: Build relocatable host perlMarcel Denia2014-07-19
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: Clean up, add commentsMarcel Denia2014-07-19
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: Rename HOST_PERL_DIR to HOST_PERL_PREFIXMarcel Denia2014-07-19
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: Refactor MakefileMarcel Denia2014-07-19
| | | | | | | | | | This is a kind of big commit. Summary: - Integrate better into OpenWRT's infrastructure - > Build host-perl using host-build.mk - > Install host-perl to STAGING_DIR_HOST - Remove microperl(for now) Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: Add some HTTP mirrorsMarcel Denia2014-07-08
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: Fix typo in PKG_LICENSE_FILESMarcel Denia2014-07-08
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
Powered by cgit, Themed by Ted Yin.