openembedded-core.git/meta/recipes-devtools/perl, branch danny

perl: fix CVE-2013-1667

2013-04-29T14:41:43+00:00

From http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-1667:

"The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent
attackers to cause a denial of service (memory consumption and crash) via a
crafted hash key."

Patch taken from upstream git.

Signed-off-by: Ross Burton

perl: fix CVE-2012-6329

2013-04-29T14:25:02+00:00

From http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-6329:
"The _compile function in Maketext.pm in the Locale::Maketext implementation in
Perl before 5.17.7 does not properly handle backslashes and fully qualified
method names during compilation of bracket notation, which allows
context-dependent attackers to execute arbitrary commands via crafted input to
an application."

Patches taken from upstream git.

Signed-off-by: Ross Burton

perl_5.14.2.bb:fix toolchain relocation issues

2013-04-23T09:38:45+00:00

1, Use create_wrapper to create perl wrapper in the SDK.
2, Add perl.real to perl-nativesdk package.

Cherry-pick commit 820a64bfb7b27e3aaa3b8c0228c4ed70b64c03d1

[YOCTO #3984]

Signed-off-by: Hongxu Jia

perl_5.14.2.bb:fix errors if configure is reattempted

2013-04-23T09:38:45+00:00

If configure of perl is reattempted it currently fails as it tries to edit
files outside ${S}. Chaging from ${WORKDIR} to ${S} avoids this issue
and allows rebuilds to work.

Cherry-pick commit f2f0a1aa489f9e6e4414fa758d3dd09a950a106c

Signed-off-by: Hongxu Jia

generate-sh.patch:fix autoreconf run failed on gmae-toolchain

2013-04-23T09:38:45+00:00

The perl shared libraries did not have RPATHs set and that made
autoreconf fail when using the SDK. The LDDLFLAGS environment variable
was already exported in the recipe but was not used when generating the
config.sh.

Cherry-pick commit df1a1dcb6d95a4aa558019530445373537c4efdd

[YOCTO #3338]

Signed-off-by: Hongxu Jia

perl_5.14.2.bb:fix autoreconf run failed on gmae-toolchain

2013-04-23T09:38:45+00:00

File warnings/register.pm has been moved to package perl, update
RPROVIDES_perl to provides perl-module-warnings-register for backward
compatibility.

Update populate_package script for:
1 Way to deal directory 'Module/' is not right, it creates packages
whose names end with '-pm'. Update to drop these packages.
2 Deal directory 'auto/' to put same name module file(.pm) and library
file(.so) into one package. That because .pm file requires the same
name .so file at runtime.

Cherry-pick commit dd65b82d24afcf3982f6fb93a6503c71fdf40dbf

[Yocto #3338]

Signed-off-by: Hongxu Jia

perl_5.14.2.bb:Fix support strict/vars/config/warnings modules

2013-04-23T09:38:45+00:00

With the move of the strict/vars/config/warnings modules to the main perl
recipe, we need to RPROVIDE those modules to ensure that package dependencies
on those modules continue to work correctly.

Cherry-pick commit 072a6d352f55bbe481b04db02aa6d9cde7d90057

Signed-off-by: Hongxu Jia

perl_5.14.2.bb: use PACKAGES_DYNAMIC as regexp

2013-04-23T09:38:45+00:00

bitbake uses PACKAGES_DYNAMIC as regexp
1, use `^' to make matching faster (and it will be more clear
that we're expecting regexp not glob)

2, use `*' to made all those last '-' optional, use .* (or nothing)

3, use `+=' instead of `=' to to keep ${PN}-locale from
bitbake.conf:PACKAGES_DYNAMIC = "^${PN}-locale-.*"

Cherry-pick commit 33b31640bf485bcfefee015e9df81aa9989b322c
Cherry-pick commit fadb4079014514beb7d2d3e6c66f63397d4ebce2

Signed-off-by: Hongxu Jia

perl_5.14.2.bb: fix dependecies

2013-04-23T09:38:45+00:00

This patch fixes 2 problems.

The first one is that when run "perl -V" on target, it fails with lack
of some .pm files. So add these perl module files to package perl itself
to fix this failure.

The second problem is that package nativesdk-perl-modules doesn't depends
on the single perl modules.

In the .bb file, dependencies of perl-modules are set by:
RRECOMMENDS_perl-modules = "${@d.getVar('PACKAGES', True)...}"
The PACKAGES would be reset by do_split_packages since:

PACKAGES_DYNAMIC = "perl-module-*"
PACKAGES_DYNAMIC_virtclass-nativesdk = "nativesdk-perl-module-*"

Then:
1) The target perl-modules RRECOMMENDS on perl-module-*, this is what
   we expect.
2) But the nativesdk-perl-modules doesn't RRECOMMENDS on
   nativesdk-perl-module-*, this is not what we expect.
The value of PACKAGES after do_split_packages has been set correctly (it
contains the nativesdk-perl-module-* packages)

But the:RRECOMMENDS_perl-modules = "${@d.getVar('PACKAGES', True)...}"
doesn't work correctly for nativesdk, the
d.getVar('RRECOMMENDS_perl-modules', True)
doesn't get the new value of the PACKAGES, it gets the value of PACKAGES
before the do_split_packages.

Cherry-pick commit 51cbb5ae76a22d465e2f6c5ef923ec2682624e3b

Signed-off-by: Hongxu Jia

perl-rdepends_5.14.2.inc:be more strict in multiline comment

2013-04-23T09:38:45+00:00

* fails to parse when http://patchwork.openembedded.org/patch/40997/ is used
Parsing recipes...ERROR: There is a confusing multiline, partially commented
expression on line 10 of file
/OE/shr-core/openembedded-core/meta/recipes-devtools/perl/perl-rdepends_5.14.2.inc
(| sed "s/\/.*\.pm: */ += /g;s/[\"\']//g;s/;.*/\"/g;s/+=.*\(require\|use\)\>
 */+=
 \"perl-module-/g;s/CPANPLUS::.*/cpanplus/g;s/CPAN::.*/cpan/g;s/::/-/g;s/
 [^+\"].*//g;s/_/-/g;s/\.pl\"$/\"/;s/\"\?\$/\"/;s/(//;" | tr [:upper:] [:lower:]
\).
Please clarify whether this is all a comment or should be parsed.
ERROR: Unable to parse
/OE/shr-core/openembedded-core/meta/recipes-devtools/perl/perl_5.14.2.bb: Exited
with "1"
ERROR: Command execution failed: Exited with 1

Cherry-pick commit 54b8096f91af47c72ac9abffe2f5c73fee27ad57

Signed-off-by: Hongxu Jia