[Bug 1242980] New: Compiler warnings in hv_func.h
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1242980
Bug ID: 1242980
Summary: Compiler warnings in hv_func.h
Product: Fedora
Version: rawhide
Component: perl
Assignee: jplesnik(a)redhat.com
Reporter: jsafrane(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: cweyl(a)alumni.drew.edu, iarnell(a)gmail.com,
jplesnik(a)redhat.com, kasal(a)ucw.cz,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
psabata(a)redhat.com, rc040203(a)freenet.de,
tcallawa(a)redhat.com
I get following warnings when compiling net-snmp with -Wall:
gcc -c -I../../include -DNETSNMP_ENABLE_IPV6 -fno-strict-aliasing -g -O2
-Ulinux -Dlinux=linux -D_REENTRANT -D_GNU_SOURCE -fwrapv -fno-strict-aliasing
-pipe -fstack-protector -I/usr/local/include -D_LARGEFILE_SOURCE
-D_FILE_OFFSET_BITS=64 -I/usr/lib64/perl5/CORE -Wall -Wstrict-prototypes
-Wwrite-strings -Wcast-qual -I. -I/usr/local/include -D_REENTRANT -D_GNU_SOURCE
-fwrapv -fno-strict-aliasing -pipe -fstack-protector -I/usr/local/include
-D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -O2 -g -pipe -Wall
-Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions
-fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64
-mtune=generic -DVERSION=\"5.08\" -DXS_VERSION=\"5.08\" -fPIC
"-I/usr/lib64/perl5/CORE" default_store.c
In file included from /usr/lib64/perl5/CORE/hv.h:629:0,
from /usr/lib64/perl5/CORE/perl.h:3344,
from default_store.xs:6:
/usr/lib64/perl5/CORE/hv_func.h: In function ‘S_perl_hash_siphash_2_4’:
/usr/lib64/perl5/CORE/hv_func.h:201:23: warning: cast discards ‘const’
qualifier from pointer target type [-Wcast-qual]
U64TYPE k0 = ((U64TYPE*)seed)[0];
^
/usr/lib64/perl5/CORE/hv_func.h:202:23: warning: cast discards ‘const’
qualifier from pointer target type [-Wcast-qual]
U64TYPE k1 = ((U64TYPE*)seed)[1];
^
In file included from /usr/lib64/perl5/CORE/hv.h:629:0,
from /usr/lib64/perl5/CORE/perl.h:3344,
from default_store.xs:6:
/usr/lib64/perl5/CORE/hv_func.h: In function ‘S_perl_hash_superfast’:
/usr/lib64/perl5/CORE/hv_func.h:260:18: warning: cast discards ‘const’
qualifier from pointer target type [-Wcast-qual]
U32 hash = *((U32*)seed) + len;
^
In file included from /usr/lib64/perl5/CORE/hv.h:629:0,
from /usr/lib64/perl5/CORE/perl.h:3344,
from default_store.xs:6:
/usr/lib64/perl5/CORE/hv_func.h: In function ‘S_perl_hash_murmur3’:
/usr/lib64/perl5/CORE/hv_func.h:364:16: warning: cast discards ‘const’
qualifier from pointer target type [-Wcast-qual]
U32 h1 = *((U32*)seed);
^
In file included from /usr/lib64/perl5/CORE/hv.h:629:0,
from /usr/lib64/perl5/CORE/perl.h:3344,
from default_store.xs:6:
/usr/lib64/perl5/CORE/hv_func.h:401:21: warning: cast discards ‘const’
qualifier from pointer target type [-Wcast-qual]
k1 = U8TO32_LE(ptr);
^
/usr/lib64/perl5/CORE/hv_func.h:408:24: warning: cast discards ‘const’
qualifier from pointer target type [-Wcast-qual]
carry = U8TO32_LE(ptr);
^
/usr/lib64/perl5/CORE/hv_func.h:416:24: warning: cast discards ‘const’
qualifier from pointer target type [-Wcast-qual]
carry = U8TO32_LE(ptr);
^
/usr/lib64/perl5/CORE/hv_func.h:424:24: warning: cast discards ‘const’
qualifier from pointer target type [-Wcast-qual]
carry = U8TO32_LE(ptr);
^
/usr/lib64/perl5/CORE/hv_func.h: In function ‘S_perl_hash_djb2’:
/usr/lib64/perl5/CORE/hv_func.h:458:18: warning: cast discards ‘const’
qualifier from pointer target type [-Wcast-qual]
U32 hash = *((U32*)seed + len);
^
/usr/lib64/perl5/CORE/hv_func.h: In function ‘S_perl_hash_sdbm’:
/usr/lib64/perl5/CORE/hv_func.h:468:18: warning: cast discards ‘const’
qualifier from pointer target type [-Wcast-qual]
U32 hash = *((U32*)seed + len);
^
In file included from /usr/lib64/perl5/CORE/hv.h:629:0,
from /usr/lib64/perl5/CORE/perl.h:3344,
from default_store.xs:6:
/usr/lib64/perl5/CORE/hv_func.h: In function ‘S_perl_hash_one_at_a_time’:
/usr/lib64/perl5/CORE/hv_func.h:494:18: warning: cast discards ‘const’
qualifier from pointer target type [-Wcast-qual]
U32 hash = *((U32*)seed) + len;
^
/usr/lib64/perl5/CORE/hv_func.h: In function ‘S_perl_hash_one_at_a_time_hard’:
/usr/lib64/perl5/CORE/hv_func.h:509:18: warning: cast discards ‘const’
qualifier from pointer target type [-Wcast-qual]
U32 hash = *((U32*)seed) + len;
^
/usr/lib64/perl5/CORE/hv_func.h: In function ‘S_perl_hash_old_one_at_a_time’:
/usr/lib64/perl5/CORE/hv_func.h:544:18: warning: cast discards ‘const’
qualifier from pointer target type [-Wcast-qual]
U32 hash = *((U32*)seed);
^
This pollutes build logs and we may miss some useful warning. What about this?
- U32 hash = *((U32*)seed) + len;
+ U32 hash = (U32) *seed + len;
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 3 months
[Bug 1297077] New: RFE: Perl6 for EPEL
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1297077
Bug ID: 1297077
Summary: RFE: Perl6 for EPEL
Product: Fedora
Version: 23
Component: perl-Perl6-Slurp
Severity: medium
Assignee: i(a)cicku.me
Reporter: ToddAndMargo(a)zoho.com
QA Contact: extras-qa(a)fedoraproject.org
CC: i(a)cicku.me, perl-devel(a)lists.fedoraproject.org
Perl6 is in Fedora 23. May we please have one for EL 7?
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 3 months
[Bug 1308365] New: slic3r crashes when loading known good stl files
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1308365
Bug ID: 1308365
Summary: slic3r crashes when loading known good stl files
Product: Fedora
Version: 23
Component: slic3r
Assignee: mhroncok(a)redhat.com
Reporter: johnduchek(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: mhroncok(a)redhat.com,
perl-devel(a)lists.fedoraproject.org
Created attachment 1127097
--> https://bugzilla.redhat.com/attachment.cgi?id=1127097&action=edit
This is an stl file that slic3r is having trouble with. It is an sd card holder
Description of problem:
slic3r loads a known good stl file, announces that it is too large and was
automatically scaled down to fit your print bed, on saying 'ok' slic3r closes
completely.
The file is 'known good' as it loads into the slic3r in Fedora 22 with no
problem (not too large)
I ran from terminal with these results:
[jduchek@localhost ~]$ slic3r
Warning: File size doesn't match number of facets in the header
Caught C++ exception of unknown type at
/usr/share/perl5/vendor_perl/Slic3r/GUI/Plater.pm line 1791.
Version-Release number of selected component (if applicable):
1.2.9-3.fc23
How reproducible:
always on the files it decides are too large. Some files still load properly.
Steps to Reproduce:
1.Run slic3r
2.add affected file (stl)
3.say ok, when it tells you it has fixed the file.
Actual results: slic3r closes so you have to start over
Expected results: display the loaded file.
Additional info: I have attached an affected stl file
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 4 months
[Bug 1295438] New: CVE-2015-8509 bugzilla: information leak when
parsing the CSV file
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1295438
Bug ID: 1295438
Summary: CVE-2015-8509 bugzilla: information leak when parsing
the CSV file
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: mprpic(a)redhat.com
CC: bazanluis20(a)gmail.com, emmanuel(a)seyman.fr,
itamar(a)ispbrasil.com.br,
perl-devel(a)lists.fedoraproject.org
Upstream Bugzilla fixed the following issue:
If an external HTML page contains a <script> element with its src attribute
pointing to a buglist in CSV format, some web browsers incorrectly try to parse
the CSV file as valid JavaScript code. As the buglist is generated based on the
privileges of the user logged into Bugzilla, the external page could collect
confidential data contained in the CSV file.
This issue was fixed in versions 4.2.16, 4.4.11, and 5.0.2.
Upstream bug:
https://bugzilla.mozilla.org/show_bug.cgi?id=1232785
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 4 months
[Bug 1295439] New: CVE-2015-8509 bugzilla: information leak when
parsing the CSV file [fedora-all]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1295439
Bug ID: 1295439
Summary: CVE-2015-8509 bugzilla: information leak when parsing
the CSV file [fedora-all]
Product: Fedora
Version: 23
Component: bugzilla
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: itamar(a)ispbrasil.com.br
Reporter: mprpic(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: bazanluis20(a)gmail.com, emmanuel(a)seyman.fr,
itamar(a)ispbrasil.com.br,
perl-devel(a)lists.fedoraproject.org
Blocks: 1295438 (CVE-2015-8509)
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1295438
[Bug 1295438] CVE-2015-8509 bugzilla: information leak when parsing the CSV
file
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 4 months
[Bug 1295436] New: CVE-2015-8508 bugzilla: cross-site scripting when
generating a dependency graph
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1295436
Bug ID: 1295436
Summary: CVE-2015-8508 bugzilla: cross-site scripting when
generating a dependency graph
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: mprpic(a)redhat.com
CC: bazanluis20(a)gmail.com, emmanuel(a)seyman.fr,
itamar(a)ispbrasil.com.br,
perl-devel(a)lists.fedoraproject.org
Upstream Bugzilla fixed the following issue:
During the generation of a dependency graph, the code for the HTML image map is
generated locally if a local dot installation is used. With escaped HTML
characters in a bug summary, it is possible to inject unfiltered HTML code in
the map file which the CreateImagemap function generates. This could be used
for a cross-site scripting attack.
This issue was fixed in versions 4.2.16, 4.4.11, and 5.0.2.
Upstream bug:
https://bugzilla.mozilla.org/show_bug.cgi?id=1221518
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 4 months
[Bug 1295437] New: CVE-2015-8508 bugzilla: cross-site scripting when
generating a dependency graph [fedora-all]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1295437
Bug ID: 1295437
Summary: CVE-2015-8508 bugzilla: cross-site scripting when
generating a dependency graph [fedora-all]
Product: Fedora
Version: 23
Component: bugzilla
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: itamar(a)ispbrasil.com.br
Reporter: mprpic(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: bazanluis20(a)gmail.com, emmanuel(a)seyman.fr,
itamar(a)ispbrasil.com.br,
perl-devel(a)lists.fedoraproject.org
Blocks: 1295436 (CVE-2015-8508)
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1295436
[Bug 1295436] CVE-2015-8508 bugzilla: cross-site scripting when generating
a dependency graph
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 4 months
[Bug 1224727] New: perl-Server-Starter-0.27-1.fc23 FTBFS: races in tests
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1224727
Bug ID: 1224727
Summary: perl-Server-Starter-0.27-1.fc23 FTBFS: races in tests
Product: Fedora
Version: rawhide
Component: perl-Server-Starter
Assignee: rc040203(a)freenet.de
Reporter: ppisar(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org,
rc040203(a)freenet.de
External Bug ID: CPAN 73711
External Bug ID: CPAN 73711
perl-Server-Starter-0.27-2.fc23 fails to build randomly because there are race
conditions in tests:
t/05-killolddelay.t .. ok
start_server (pid:11873) starting now...
starting new worker 11874
autorestart triggered (interval=6)
starting new worker 11881
new worker is now running, sending TERM to old workers:11874
sleeping 2 secs before killing old workers
killing old workers
old worker 11874 died, status:0
# Failed test 'status after auto-restart'
# at t/06-autorestart.t line 55.
# '1:11874
# 2:11881
# '
# doesn't match '(?^s:^2:\d+\n$)'
received TERM, sending TERM to all workers:11881
worker 11881 died, status:0
exiting
[Test::TCP] Child process does not block(PID: 11873, PPID: 11872) at
/usr/share/perl5/vendor_perl/Test/TCP.pm line 94.
start_server (pid:11882) starting now...
starting new worker 11883
autorestart triggered (interval=6)
starting new worker 11884
new worker is now running, sending USR1 to old workers:11883
sleeping 2 secs before killing old workers
killing old workers
old worker 11883 died, status:0
received TERM, sending TERM to all workers:11884
worker 11884 died, status:0
exiting
[Test::TCP] Child process does not block(PID: 11882, PPID: 11872) at
/usr/share/perl5/vendor_perl/Test/TCP.pm line 94.
# Looks like you failed 1 test of 28.
t/06-autorestart.t ...
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/28 subtests
This bug was fixed by Fedora patches which you dropped when rebasing the
package.
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 4 months