Safe.pm security fix

4 files changed, 246 insertions, 8 deletions

diff --git a/sys-devel/perl/ChangeLog b/sys-devel/perl/ChangeLog
index f1256bd5271b..4f1733ca1b39 100644
--- a/sys-devel/perl/ChangeLog
+++ b/sys-devel/perl/ChangeLog
@@ -1,6 +1,18 @@
 # ChangeLog for sys-devel/perl
 # Copyright 2002 Gentoo Technologies, Inc.; Distributed under the GPL
-# $Header: /var/cvsroot/gentoo-x86/sys-devel/perl/ChangeLog,v 1.29 2002/12/17 20:38:38 lostlogic Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-devel/perl/ChangeLog,v 1.30 2002/12/19 21:46:05 mcummings Exp $
+
+* perl-5.6.1-r10 (19 Dec 2002)
+
+  19 Dec 2002; Michael Cummings <mcummings@gentoo.org>
+  perl-5.6.1-r10.ebuild:
+
+  Contains patch for safe.pm - security bug, see bug 12190.
+
+  19 Dec 2002; Michael Cummings <mcummings@gentoo.org>
+  perl-5.8.0-r6.ebuild:
+
+  Same name, different ebuild. This is for the safe.pm fix.
 
 * perl-5.8.0-r6 (17 Dec 2002)
 
diff --git a/sys-devel/perl/files/digest-perl-5.6.1-r10 b/sys-devel/perl/files/digest-perl-5.6.1-r10
new file mode 100644
index 000000000000..a1b30f92f979
--- /dev/null
+++ b/sys-devel/perl/files/digest-perl-5.6.1-r10
@@ -0,0 +1 @@
+MD5 ec1ff15464809b562aecfaa2e65edba6 perl-5.6.1.tar.gz 5983695
diff --git a/sys-devel/perl/perl-5.6.1-r10.ebuild b/sys-devel/perl/perl-5.6.1-r10.ebuild
new file mode 100644
index 000000000000..fc40c9a1f1d4
--- /dev/null
+++ b/sys-devel/perl/perl-5.6.1-r10.ebuild
@@ -0,0 +1,222 @@
+# Copyright 1999-2002 Gentoo Technologies, Inc.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-devel/perl/perl-5.6.1-r10.ebuild,v 1.1 2002/12/19 21:46:05 mcummings Exp $
+
+IUSE="berkdb gdbm"
+
+S="${WORKDIR}/${P}"
+DESCRIPTION="Larry Wall's Practical Extraction and Reporting Language"
+SRC_URI="$ftp://ftp.perl.org/pub/CPAN/src/${P}.tar.gz"
+HOMEPAGE="http://www.perl.org"
+
+LICENSE="Artistic GPL-2"
+SLOT="0"
+KEYWORDS="~x86 ~ppc ~sparc ~alpha ~mips"
+
+RDEPEND="gdbm? ( >=sys-libs/gdbm-1.8.0 )
+	>=sys-libs/db-3.2.3h-r3
+	=sys-libs/db-1.85-r1"
+
+DEPEND="sys-apps/groff
+	>=sys-apps/portage-2.0.45-r4
+	${RDEPEND}"
+		
+
+PDEPEND=">=dev-perl/ExtUtils-MakeMaker-6.05-r3
+	>=dev-perl/Safe-2.09"
+
+src_compile() {
+	use gdbm || use berkdb || die "You must have either gdbm or berkdb installed and in your use flags."
+
+    #The following is to handle international users. Perl does nls post-install
+    export LC_ALL=C
+
+    if [ "${ARCH}" = "alpha" ]; then
+        CFLAGS="${CFLAGS} -fPIC"
+        CXXFLAGS="${CXXFLAGS} -fPIC"
+    fi  
+
+    local myconf
+    if [ "`use gdbm`" ]
+    then
+		myconf="-Di_gdbm"
+    fi
+    if [ "`use berkdb`" ]
+    then
+		myconf="${myconf} -Di_db -Di_ndbm"
+    else
+		myconf="${myconf} -Ui_db -Ui_ndbm"
+    fi
+
+	# configure for libperl.so
+    sh Configure -des \
+		-Darchname=${CHOST%%-*}-linux \
+		-Dcccdlflags='-fPIC' \
+		-Dcc=gcc \
+		-Dccdlflags='-rdynamic' \
+		-Dprefix='/usr' \
+		-Dvendorprefix='/usr' \
+		-Dsiteprefixx='/usr' \
+		-Dlocincpth=' ' \
+		-Doptimize="${CFLAGS}" \
+		-Duselargefiles \
+		-Duseshrplib \
+		-Dman3ext=3pm \
+		-Dlibperl=libperl.so \
+		-Dd_dosuid \
+		-Dd_semctl_semun \
+		-Dcf_by=Gentoo \
+		-Ud_csh \
+		${myconf} || die
+	# add optimization flags
+    cp config.sh config.sh.orig
+    sed -e "s/optimize='-O2'/optimize=\'${CFLAGS}\'/" config.sh.orig > config.sh
+	# create libperl.so and move it out of the way
+	mv -f Makefile Makefile_orig
+	sed -e 's#^CCDLFLAGS = -rdynamic -Wl,-rpath,/usr/lib/perl5/.*#CCDLFLAGS = -rdynamic#' \
+	    -e 's#^all: $(FIRSTMAKEFILE) #all: README #' \
+		Makefile_orig > Makefile
+    export PARCH=`grep myarchname config.sh | cut -f2 -d"'"`
+	# fixes a bug in the make/testing on new systems
+	make -f Makefile depend || die
+	mv makefile makefile_orig
+	mv x2p/makefile x2p/makefile_orig
+		  egrep -v "(<built-in>|<command line>)" makefile_orig >makefile
+		  egrep -v "(<built-in>|<command line>)" x2p/makefile_orig >x2p/makefile
+	make -f Makefile libperl.so || die
+	mv libperl.so ${WORKDIR}
+
+	# starting from scratch again
+	cd ${WORKDIR}
+	rm -rf ${S}
+	unpack ${A}
+	cd ${S}
+	
+	# configure for libperl.a
+# this is gross -- from Christian Gafton, Red Hat
+	cat > config.over <<EOF
+installprefix=${D}/usr
+#test -d \$installprefix || mkdir \$installprefix
+#test -d \$installprefix/bin || mkdir \$installprefix/bin
+installarchlib=\`echo \$installarchlib | sed "s!\$prefix!\$installprefix!"\`
+installbin=\`echo \$installbin | sed "s!\$prefix!\$installprefix!"\`
+#installman1dir=\$installprefix/share/man/man1
+#installman3dir=\$installprefix/share/man/man3
+installman1dir=\`echo \$installman1dir | sed "s!\$prefix!\$installprefix!"\`
+installman3dir=\`echo \$installman3dir | sed "s!\$prefix!\$installprefix!"\`
+installman1dir=\`echo \$installman1dir | sed "s!/man/!/share/man/!"\`
+installman3dir=\`echo \$installman3dir | sed "s!/man/!/share/man/!"\`
+man1ext=1
+man3ext=3pm
+installprivlib=\`echo \$installprivlib | sed "s!\$prefix!\$installprefix!"\`
+installscript=\`echo \$installscript | sed "s!\$prefix!\$installprefix!"\`
+installsitelib=\`echo \$installsitelib | sed "s!\$prefix!\$installprefix!"\`
+installsitearch=\`echo \$installsitearch | sed "s!\$prefix!\$installprefix!"\`
+EOF
+
+    sh Configure -des \
+		-Dcc=gcc \
+		-Dprefix='/usr' \
+		-Dvendorprefix='/usr' \
+		-Dsiteprefixx='/usr' \
+		-Darchname=${CHOST%%-*}-linux \
+		-Doptimize="${CFLAGS}" \
+		-Duselargefiles \
+		-Dd_dosuid \
+		-Dlocincpth=' ' \
+		-Dd_semctl_semun \
+		-Dman3ext=3pm \
+		-Dcf_by=Gentoo \
+		-Ud_csh \
+		${myconf} || die
+
+    #Optimize ;)
+    cp config.sh config.sh.orig
+    sed -e "s/optimize='-O2'/optimize=\'${CFLAGS}\'/" config.sh.orig > config.sh
+    #THIS IS USED LATER:
+    export PARCH=`grep myarchname config.sh | cut -f2 -d"'"`
+
+# Umm, for some reason this doesn't want to work, so we'll just remove
+#  the makefiles and let make rebuild them itself. (It seems to do it
+#  right the second time... -- pete
+#    cp makefile makefile.orig
+#    sed -e "s:^0::" makefile.orig > makefile
+
+	mv Makefile Makefile_orig
+	sed -e 's#^all: $(FIRSTMAKEFILE) #all: README #' \
+		Makefile_orig > Makefile
+    
+    #for some reason, this rm -f doesn't seem to actually do anything. So we explicitly use "Makefile"
+    #(rather than the default "makefile") in all make commands below.
+    rm -f makefile x2p/makefile
+    make -f Makefile depend || die
+    mv makefile makefile_orig
+    mv x2p/makefile x2p/makefile_orig
+    egrep -v "(<built-in>|<command line>)" makefile_orig >makefile
+    egrep -v "(<built-in>|<command line>)" x2p/makefile_orig >x2p/makefile
+    make -f Makefile || die
+	cp ${O}/files/stat.t ./t/op/
+    # Parallel make fails
+	# dont use the || die since some tests fail on bootstrap
+	if [ `expr "$PARCH" ":" "sparc"` -gt 4 ]; then
+		echo "Skipping tests on this platform"
+	else
+    	make -f Makefile test 
+	fi
+}
+
+src_install() {
+#The following is to handle international users. Perl does nls post-install 
+    export LC_ALL=C 
+
+    export PARCH=`grep myarchname config.sh | cut -f2 -d"'"`
+
+	insinto /usr/lib/perl5/${PV}/${PARCH}/CORE/
+	doins ${WORKDIR}/libperl.so
+	dosym /usr/lib/perl5/${PV}/${PARCH}/CORE/libperl.so /usr/lib/libperl.so
+	
+
+#    make -f Makefile \
+#		INSTALLMAN1DIR=${D}/usr/share/man/man1 \
+#		INSTALLMAN3DIR=${D}/usr/share/man/man3 \
+#		install || die
+
+	make \
+		DESTDIR=${D} \
+		INSTALLMAN1DIR=${D}/usr/share/man/man1 \
+		INSTALLMAN3DIR=${D}/usr/share/man/man3 \
+		install || die "Unable to make install"
+    install -m 755 utils/pl2pm ${D}/usr/bin/pl2pm
+
+	#man pages
+
+#	./perl installman \
+#		--man1dir=${D}/usr/share/man/man1 \
+#		--man1ext=1 \
+#		--man3dir=${D}/usr/share/man/man3 \
+#		--man3ext=3
+
+
+	# This removes ${D} from Config.pm
+
+	dosed /usr/lib/perl5/${PV}/${CHOST%%-*}-linux/Config.pm
+	dosed /usr/lib/perl5/${PV}/${CHOST%%-*}-linux/.packlist
+
+	# DOCUMENTATION
+
+    dodoc Changes* Artistic Copying README Todo* AUTHORS
+    prepalldocs
+
+    
+	# HTML Documentation
+	dodir /usr/share/doc/${PF}/html
+	${D}/usr/bin/perl installhtml --recurse --htmldir=${D}/usr/share/doc/${PF}/html
+
+}
+
+
+pkg_postinst() {
+	# generates the ph files for perl
+	cd /usr/include; h2ph *.h sys/*.h
+
+}
diff --git a/sys-devel/perl/perl-5.8.0-r6.ebuild b/sys-devel/perl/perl-5.8.0-r6.ebuild
index fb03e669cf0c..590319e1d753 100644
--- a/sys-devel/perl/perl-5.8.0-r6.ebuild
+++ b/sys-devel/perl/perl-5.8.0-r6.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2002 Gentoo Technologies, Inc.
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-devel/perl/perl-5.8.0-r6.ebuild,v 1.2 2002/12/17 18:37:07 lostlogic Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-devel/perl/perl-5.8.0-r6.ebuild,v 1.3 2002/12/19 21:46:05 mcummings Exp $
 
 IUSE="berkdb gdbm"
 
@@ -12,15 +12,18 @@ LICENSE="Artistic GPL-2"
 SLOT="0"
 # devs, please email if this tests ok on your platform rather than
 # unmasking it - mcummings@gentoo.org
-KEYWORDS="-x86 -sparc -ppc -alpha"
+KEYWORDS="~x86 ~sparc ~ppc ~alpha ~mips"
 
 DEPEND="sys-apps/groff 
 	berkdb? ( >=sys-libs/db-3.2.3h-r3 =sys-libs/db-1.85-r1 ) 
-	gdbm? ( >=sys-libs/gdbm-1.8.0 )"
+	gdbm? ( >=sys-libs/gdbm-1.8.0 )
+	>=sys-apps/portage-2.0.45-r4"
 
 RDEPEND="berkdb? ( >=sys-libs/db-3.2.3h-r3 =sys-libs/db-1.85-r1 ) 
 	gdbm? ( >=sys-libs/gdbm-1.8.0 )"
     
+PDEPEND=">=dev-perl/Safe-2.09"
+
 pkg_setup() {
 	if [ -z "`use threads`" ]
 	then
@@ -38,13 +41,13 @@ pkg_setup() {
 src_compile() {
 	export LC_ALL=C
     local myconf
-	myarch="${CHOST%%-*}-linux"
 	if [ "`use threads`" ]
 	then
 		einfo "using threads"
+		mythreading="-multi"
 		myconf="-Dusethreads ${myconf}"
-		myarch="${CHOST%%-*}-linux-thread-multi"
 	fi
+	myarch="${CHOST%%-*}-linux-thread"
 
 	if [ "`use gdbm`" ]
 	then
@@ -195,8 +198,8 @@ EOF
 
 # This removes ${D} from Config.pm
 
-	dosed /usr/lib/perl5/${PV}/${myarch}/Config.pm
-	dosed /usr/lib/perl5/${PV}/${myarch}/.packlist
+	dosed /usr/lib/perl5/${PV}/${myarch}${mythreading}/Config.pm
+	dosed /usr/lib/perl5/${PV}/${myarch}${mythreading}/.packlist