aboutsummaryrefslogtreecommitdiff
path: root/lang/perl/patches
Commit message (Collapse)AuthorAge
* lang/perl: Upgraded to Perl 5.24.1Michail Frolov2017-05-10
| | | | Signed-off-by: Michail Frolov <frolovm@pobox.com>
* perl: securely handle duplicate environment variables [CVE-2016-2381]Jo-Philipp Wich2016-03-01
| | | | | | | | | | | | | | | | | | | | | | | | | | Stephane Chazelas discovered a bug in the environment handling in Perl. Perl provides a Perl-space hash variable, %ENV, in which environment variables can be looked up. If a variable appears twice in envp, only the last value would appear in %ENV, but getenv would return the first. Perl's taint security mechanism would be applied to the value in %ENV, but not to the other rest of the environment. This could result in an ambiguous environment causing environment variables to be propagated to subprocesses, despite the protections supposedly offered by taint checking. With this update Perl changes the behavior to match the following: a) %ENV is populated with the first environment variable, as getenv would return. b) Duplicate environment entries are removed. References: * http://perl5.git.perl.org/perl.git/commit/ae37b791a73a9e78dedb89fb2429d2628cf58076 * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2381 Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
* perl: ensure File::Spec::canonpath() preserves taint [CVE-2015-8607]Jo-Philipp Wich2016-01-14
| | | | | | | | | | | | | | | | | Beginning in PathTools 3.47 and/or perl 5.20.0, the File::Spec::canonpath() routine returned untained strings even if passed tainted input. This defect undermines the guarantee of taint propagation, which is sometimes used to ensure that unvalidated user input does not reach sensitive code. This defect was found and reported by David Golden of MongoDB, and a patch was provided by Tony Cook. References: * https://rt.perl.org/Public/Bug/Display.html?id=126862 * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8607 Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
* perl: Work around recompile failuresMarcel Denia2015-12-10
| | | | | | | Apparently, recompiling/relinking fails under some circumstances. This patch has been reported to work around that issue. Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Reorganize patchesMarcel Denia2015-09-25
| | | | | | The old scheme didn't make any sense...not that there was a scheme really. Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Remove microperl caretx dependency patchMarcel Denia2015-09-25
| | | | | | | This will make microperl unable to build. That's okay, since we haven't been building it for quite a while now. Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Skip $0 test on busybox in dist/threads/t/join.tMarcel Denia2015-09-01
| | | | | | | This test requires a ps which provides the -f option, as well as suitable output. We can't provide either with busybox. Just skip it for now. Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: Skip crypt() tests if unavailable in t/op/tie_fetch_count.tMarcel Denia2015-09-01
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* perl: fix musl compatibilityJo-Philipp Wich2015-06-17
| | | | | | | | | | | | | | - Add patch to inhibit the libm IEEE math switch on musl - Add postprocessing for config.sh to the Makefile to fixup defines for musl, idea taken from http://patchwork.openembedded.org/patch/91707/ This is the least invasive approach I could come up to fix the build failure asap. Another possibility is maintaining yet another set of musl specific architecture config files, but I think that this introduces a lot of maintenance overhead. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
* perl: Add host-perl relink hackMarcel Denia2014-08-14
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: Add microperl caretx dependencyMarcel Denia2014-07-07
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: Remove old static uudmap handlingMarcel Denia2014-07-07
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: Add hack to make perl always use miniperl during buildMarcel Denia2014-07-07
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* lang/perl: Rebase patchesMarcel Denia2014-07-07
| | | | Signed-off-by: Marcel Denia <naoir@gmx.net>
* Import of oldpackages/perlMarcel Denia2014-07-07
Signed-off-by: Marcel Denia <naoir@gmx.net>
Powered by cgit, Themed by Ted Yin.