summaryrefslogtreecommitdiff
path: root/extra-modules.mk
diff options
context:
space:
mode:
authorAurelien Jarno <aurelien@aurel32.net>2016-09-05 22:53:22 +0200
committerFlorian Weimer <fw@deneb.enyo.de>2017-07-06 15:14:47 +0200
commit605e6f9f4a4bf39416ac16fad1f41b5a93a0774d (patch)
tree005c274060928991b4ad29826bc9639231a21694 /extra-modules.mk
parent8c04a738135e6267f21927588ae21b2eb48ca9da (diff)
downloadglibc-605e6f9f4a4bf39416ac16fad1f41b5a93a0774d.tar.gz
conform tests: call perl with '-I.'
Historically perl includes the current directory in the module search path. Over the time this has been considered as a security issue and the recent vulnerabilities [1] made people to reconsider this behaviour. It is almost sure that this will be removed in the future [2], possibly for the 5.26 release, although this is not yet firmly decided. Debian has decided to backport the patches [3], so the perl binary in unstable do not have '.' in @INC anymore. This behaviour is used in the conform perl scripts to include the GlibcConform module. This patch fixes that by calling perl with '-I.'. This is not a security issue in this case as make ensures that the current directory is $(srcdir)/conform/ when the scripts are called. Passing the full path would do exactly the same. [1] CVE-2016-1238 CVE-2016-6185 [2] https://rt.perl.org/Public/Bug/Display.html?id=127810 [3] https://lists.debian.org/debian-devel-announce/2016/08/msg00013.html Changelog: * conform/Makefile (conformtest-header-tests): Pass -I. to $(PERL). (linknamespace-symlists-tests): Likewise. (linknamespace-header-tests): Likewise. (cherry picked from commit 6d5336211d2e823d4d431a01e62a80d9be4cbc9d)
Diffstat (limited to 'extra-modules.mk')
0 files changed, 0 insertions, 0 deletions