From: Jakub Bogusz <qboosh@pld-linux.org>
Date: Mon, 13 Jan 2003 14:05:02 +0000 (+0000)
Subject: - security fix for Safe.pm from Debian
X-Git-Tag: rpm-4_0_2-104~11
X-Git-Url: https://git.pld-linux.org/?p=packages%2Fperl.git;a=commitdiff_plain;h=63d652d6bdfaccd73acda478858f28b216ee06d1

- security fix for Safe.pm from Debian

Changed files:
    perl-Safe.patch -> 1.1
---

diff --git a/perl-Safe.patch b/perl-Safe.patch
new file mode 100644
index 0000000..45da3ec
--- /dev/null
+++ b/perl-Safe.patch
@@ -0,0 +1,20 @@
+--- perl-5.6.1.orig/ext/Opcode/Safe.pm
++++ perl-5.6.1/ext/Opcode/Safe.pm
+@@ -213,7 +213,7 @@
+     # Create anon sub ref in root of compartment.
+     # Uses a closure (on $expr) to pass in the code to be executed.
+     # (eval on one line to keep line numbers as expected by caller)
+-	my $evalcode = sprintf('package %s; sub { eval $expr; }', $root);
++	my $evalcode = sprintf('package %s; sub { @_ = (); eval $expr; }', $root);
+     my $evalsub;
+ 
+ 	if ($strict) { use strict; $evalsub = eval $evalcode; }
+@@ -227,7 +227,7 @@
+     my $root = $obj->{Root};
+ 
+     my $evalsub = eval
+-	    sprintf('package %s; sub { do $file }', $root);
++	    sprintf('package %s; sub { @_ = (); do $file }', $root);
+     return Opcode::_safe_call_sv($root, $obj->{Mask}, $evalsub);
+ }
+