Bug 14098 - Text::Wrap 2012.0818 incorrectly parses strings when $Text::Wrap::huge = 'wrap'
Summary: Text::Wrap 2012.0818 incorrectly parses strings when $Text::Wrap::huge = 'wrap'
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 4
Hardware: i586 Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Jerome Quelin
QA Contact:
URL: https://bugzilla.mozilla.org/show_bug...
Whiteboard:
Keywords: PATCH, Triaged
Depends on: 14170
Blocks:
  Show dependency tree / graph
 
Reported: 2014-09-15 18:35 CEST by Frédéric "LpSolit" Buclin
Modified: 2014-10-09 16:08 CEST (History)
2 users (show)

See Also:
Source RPM: perl-5.18.1-3.mga4
CVE:
Status comment:

Attachments
patch for Text::Wrap 2012.0818 (660 bytes, patch)
2014-09-15 18:35 CEST, Frédéric "LpSolit" Buclin 		Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Description Frédéric "LpSolit" Buclin 2014-09-15 18:35:40 CEST 
Created attachment 5416 [details]
patch for Text::Wrap 2012.0818

Mageia 4 provides Text::Wrap 2012.0818 via its perl-5.18.1-3.mga4 RPM. But this version of Text::Wrap is bogus. If you execute this command from the shell:

perl -MText::Wrap -wE 'say wrap("", "", "http://193.35.206.163/issues/clients/index.php?issue=6239&order=issue_id&sort=desc")'

you get the error "This shouldn't happen at /usr/lib/perl5/5.18.1/Text/Wrap.pm line 84."

This is a known bug in Text::Wrap 2012.0818 which has been fixed in Text::Wrap 2013.0426, see https://rt.cpan.org/Public/Bug/Display.html?id=79766.

The fix is trivial, see the attachment. This is the fix which has been applied upstream.

Bugzilla may crash on Mageia 4 due to this bug (this happened to me earlier today).
Manuel Hiebel 2014-09-21 15:26:29 CEST

Keywords: (none) => PATCH, Triaged
Assignee: bugsquad => jquelin

Comment 1 Jerome Quelin 2014-09-26 09:46:46 CEST 
perl-5.18.1-3.1.mga4 now available in mga4's core/updates_testing (currently being indexed.
Please test (procedure above) & push.

Advisory (feel free to change it to better wording)
========================================
The Text::Wrap version provided in perl contains a bug that can lead to a code path that shouldn't be hit. This can lead to crashes in other software, such as bugzilla.
This new perl package fixes the problem.
========================================

thanks.

CC: (none) => jquelin

Jerome Quelin 2014-09-26 09:47:14 CEST

QA Contact: (none) => qa-bugs

Comment 2 Jerome Quelin 2014-09-26 09:48:31 CEST 
oops, I've put QA team in the wrong field. Fixed & sorry for the noise.

Assignee: jquelin => qa-bugs

Comment 3 David Walser 2014-09-26 14:53:33 CEST 
Please fix security Bug 14170 first.  Thanks.

CC: (none) => qa-bugs
Depends on: (none) => 14170
Assignee: qa-bugs => jquelin
QA Contact: qa-bugs => (none)

Comment 4 claire robinson 2014-10-09 16:08:43 CEST 
perl pushed in bug 14170 so closing this one now.

Status: NEW => RESOLVED
Resolution: (none) => FIXED
Note You need to log in before you can comment on or make changes to this bug.