[perl-Pod-Coverage/f17] Do not put ./lib into @INC by pod_cover tool

Petr Pisar ppisar at fedoraproject.org
Wed May 22 13:29:59 UTC 2013


commit 262004ba184b2f8978323aec6f222c905b6122cf
Author: Petr Písař <ppisar at redhat.com>
Date:   Wed May 22 15:13:19 2013 +0200

    Do not put ./lib into @INC by pod_cover tool

 ...age-0.23-Do-not-search-.-lib-by-pod_cover.patch |   25 ++++++++++++++++++++
 perl-Pod-Coverage.spec                             |    8 +++++-
 2 files changed, 32 insertions(+), 1 deletions(-)
---
diff --git a/Pod-Coverage-0.23-Do-not-search-.-lib-by-pod_cover.patch b/Pod-Coverage-0.23-Do-not-search-.-lib-by-pod_cover.patch
new file mode 100644
index 0000000..20d69f9
--- /dev/null
+++ b/Pod-Coverage-0.23-Do-not-search-.-lib-by-pod_cover.patch
@@ -0,0 +1,25 @@
+From 273067dbd3e8bfc4b26849a4615c3f44f54e7029 Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= <ppisar at redhat.com>
+Date: Wed, 22 May 2013 15:05:54 +0200
+Subject: [PATCH] Do not search ./lib by pod_cover
+
+<https://rt.cpan.org/Public/Bug/Display.html?id=85540>
+---
+ bin/pod_cover | 1 -
+ 1 file changed, 1 deletion(-)
+
+diff --git a/bin/pod_cover b/bin/pod_cover
+index c11b2ff..94ea7aa 100644
+--- a/bin/pod_cover
++++ b/bin/pod_cover
+@@ -3,7 +3,6 @@
+ # Run this to get a coverage analysis of the embedded documentation
+ 
+ use Pod::Coverage;
+-use lib 'lib';			# to test distribution inside './lib'
+ use strict;
+ 
+ print "Pod coverage analysis v1.00 (C) by Tels 2001.\n";
+-- 
+1.8.1.4
+
diff --git a/perl-Pod-Coverage.spec b/perl-Pod-Coverage.spec
index f10d9a8..c8f35b7 100644
--- a/perl-Pod-Coverage.spec
+++ b/perl-Pod-Coverage.spec
@@ -1,11 +1,13 @@
 Name:           perl-Pod-Coverage
 Version:        0.22
-Release:        1%{?dist}
+Release:        2%{?dist}
 Summary:        Checks if the documentation of a module is comprehensive
 License:        GPL+ or Artistic
 Group:          Development/Libraries
 URL:            http://search.cpan.org/dist/Pod-Coverage/
 Source0:        http://www.cpan.org/authors/id/R/RC/RCLAMP/Pod-Coverage-%{version}.tar.gz
+# Make pod_cover more secure, CPAN RT#85540
+Patch0:         Pod-Coverage-0.23-Do-not-search-.-lib-by-pod_cover.patch
 BuildArch:      noarch
 BuildRequires:  perl(base)
 BuildRequires:  perl(constant)
@@ -37,6 +39,7 @@ module is comprehensive.
 
 %prep
 %setup -q -n Pod-Coverage-%{version}
+%patch0 -p1
 
 %build
 perl Makefile.PL INSTALLDIRS=vendor
@@ -61,6 +64,9 @@ make test
 %{_mandir}/man3/Pod::Coverage::Overloader.3pm*
 
 %changelog
+* Wed May 22 2013 Petr Pisar <ppisar at redhat.com> - 0.22-2
+- Do not put ./lib into @INC by pod_cover tool
+
 * Wed Feb 08 2012 Petr Šabata <contyk at redhat.com> - 0.22-1
 - 0.22 bump
 - Switch to EE::MM


More information about the scm-commits mailing list