[libxml-dt-perl] 02/03: drop the patch released upstream
Damyan Ivanov
dmn at moszumanska.debian.org
Fri Aug 1 08:14:39 UTC 2014
This is an automated email from the git hooks/post-receive script.
dmn pushed a commit to branch master
in repository libxml-dt-perl.
commit fee25f017087e5bc1f8cd8a6bcac80181b97b8c0
Author: Damyan Ivanov <dmn at debian.org>
Date: Fri Aug 1 08:12:39 2014 +0000
drop the patch released upstream
---
debian/patches/insecure-tmp.patch | 62 ---------------------------------------
debian/patches/series | 1 -
2 files changed, 63 deletions(-)
diff --git a/debian/patches/insecure-tmp.patch b/debian/patches/insecure-tmp.patch
deleted file mode 100644
index 26078fd..0000000
--- a/debian/patches/insecure-tmp.patch
+++ /dev/null
@@ -1,62 +0,0 @@
-Description: Insecure use of temporary files
- replaces hardcoded '/tmp/_xml_$$' usage with File::Temp
-Author: Damyan Ivanov <dmn at debian.org>
-Bug-Debian: https://bugs.debian.org/756566
-Forwarded: https://rt.cpan.org/Ticket/Display.html?id=97655
-Bug: https://rt.cpan.org/Ticket/Display.html?id=97655
-
---- a/mkdtskel
-+++ b/mkdtskel
-@@ -1,6 +1,7 @@
- #!/usr/bin/perl -s
- use XML::DT;
- use XML::DTDParser "ParseDTDFile";
-+use File::Temp;
-
- our ($dtd, $html, $lines);
-
-@@ -15,8 +16,8 @@ if ($dtd) {
- else {
- if ($lines) {
- ## XXX - fixme, using head/xmllint is not a good idea
-- system("head -$lines $filename | xmllint --recover - > /tmp/_xml_$$");
-- $filename = "/tmp/_xml_$$";
-+ $filename = File::Temp->new( UNLINK => 0 )->filename;
-+ system("head -$lines $filename | xmllint --recover - > $filename");
- }
-
- if ($html) {
-@@ -25,7 +26,7 @@ else {
- else {
- mkdtskel($filename, @ARGV);
- }
-- unlink("/tmp/_xml_$$") if $lines;
-+ unlink($filename) if $lines;
- }
-
- __END__
---- a/mkxmltype
-+++ b/mkxmltype
-@@ -1,6 +1,7 @@
- #!/usr/bin/perl -w -s
- use XML::DT;
- use Data::Dumper;
-+use File::Temp;
- use Term::ReadLine;
- #use locale;
-
-@@ -50,11 +51,11 @@ sub mkxmltypes {
-
- for my $fname (@files){
- if($lines){
-- system("head -$lines $fname | xmllint --recover - > /tmp/_xml_$$");
-- $fname = "/tmp/_xml_$$";
-+ $fname = File::Temp->new( UNLINK => 0 )->filename;
-+ system("head -$lines $fname | xmllint --recover - > $fname");
- }
- dt($fname,%handler);
-- unlink("/tmp/_xml_$$") if $lines;
-+ unlink($fname) if $lines;
- }
-
- print "# ", join(" ",keys %root)," ...", scalar(localtime(time)) ,"\n";
diff --git a/debian/patches/series b/debian/patches/series
deleted file mode 100644
index b711819..0000000
--- a/debian/patches/series
+++ /dev/null
@@ -1 +0,0 @@
-insecure-tmp.patch
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libxml-dt-perl.git
More information about the Pkg-perl-cvs-commits
mailing list