Your message dated Sun, 04 Apr 2010 08:31:24 +0000
with message-id <[email protected]>
and subject line Bug#540938: fixed in libnet-ldap-perl 1:0.4001-1
has caused the Debian Bug report #540938,
regarding libnet-ldap-perl: Error in _cis_substrings() match
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
540938: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=540938
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libnet-ldap-perl
Version: 1:0.39-1
Severity: normal
Tags: patch
Hello,
The function _cis_substrings, around line 248, does
return grep(/\Q$regex\E/i, @_) ? 1 : 0;
The problem is, value of $regex is already escaped at that point, so
invoking \Q...\E performs another, unnecessary escape and messes up
the regex value.
Specifically,
abc* should be ^abc in regex, but due to escape it becomes \^abc
*abc should be abc$ in regex, but due to escape it becomes abc\$
The problem only gets worse if you have "non standard" chars in the
matching part, such as colons:
abc::def* becomes \^abc\\:\\:def
The solution is removing the unnecessary \Q \E, which the attached patch does.
Best regards,
Davor Ocelic
Spinlock Solutions
http://www.spinlocksolutions.com/
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (700, 'testing'), (650, 'unstable'), (550, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.26-2-openvz-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages libnet-ldap-perl depends on:
ii libconvert-asn1-perl 0.22-1 Perl module for encoding and decod
ii libwww-perl 5.829-1 WWW client/server library for Perl
ii perl [libmime-base64-perl] 5.10.0-24 Larry Wall's Practical Extraction
libnet-ldap-perl recommends no packages.
Versions of packages libnet-ldap-perl suggests:
ii libauthen-sasl-perl 2.12-1 Authen::SASL - SASL Authentication
ii libio-socket-ssl-perl 1.26-1 Perl module implementing object or
ii liburi-perl 1.37+dfsg-1 Manipulates and accesses URI strin
ii libxml-parser-perl 2.36-1.1+b1 Perl module for parsing XML files
ii libxml-sax-perl 0.96+dfsg-1 Perl module for using and building
ii perl [libdigest-md5-perl] 5.10.0-24 Larry Wall's Practical Extraction
-- no debconf information
--- /usr/share/perl5/Net/LDAP/FilterMatch.pm.old 2009-08-10
19:05:15.000000000 +0200
+++ /usr/share/perl5/Net/LDAP/FilterMatch.pm 2009-08-10 19:05:39.000000000
+0200
@@ -245,7 +245,7 @@
my $regex=shift;
my $op=shift;
return 1 if ($regex =~ /^$/);
- return grep(/\Q$regex\E/i, @_) ? 1 : 0;
+ return grep(/$regex/i, @_) ? 1 : 0;
}
sub _exact_substrings($@)
--- End Message ---
--- Begin Message ---
Source: libnet-ldap-perl
Source-Version: 1:0.4001-1
We believe that the bug you reported is fixed in the latest version of
libnet-ldap-perl, which is due to be installed in the Debian FTP archive:
libnet-ldap-perl_0.4001-1.debian.tar.gz
to main/libn/libnet-ldap-perl/libnet-ldap-perl_0.4001-1.debian.tar.gz
libnet-ldap-perl_0.4001-1.dsc
to main/libn/libnet-ldap-perl/libnet-ldap-perl_0.4001-1.dsc
libnet-ldap-perl_0.4001-1_all.deb
to main/libn/libnet-ldap-perl/libnet-ldap-perl_0.4001-1_all.deb
libnet-ldap-perl_0.4001.orig.tar.gz
to main/libn/libnet-ldap-perl/libnet-ldap-perl_0.4001.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jonathan Yu <[email protected]> (supplier of updated libnet-ldap-perl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 03 Apr 2010 13:44:07 -0400
Source: libnet-ldap-perl
Binary: libnet-ldap-perl
Architecture: source all
Version: 1:0.4001-1
Distribution: unstable
Urgency: low
Maintainer: Debian Perl Group <[email protected]>
Changed-By: Jonathan Yu <[email protected]>
Description:
libnet-ldap-perl - client interface to LDAP servers
Closes: 540938 553188
Changes:
libnet-ldap-perl (1:0.4001-1) unstable; urgency=low
.
[ Jonathan Yu ]
* New upstream release
+ Fix for multiple consecutive spaces in canonical_dn, as
described in RT#51165 (Closes: #553188)
+ Avoid escaping regular expressions twice (Closes: #540938)
* Standards-Version 3.8.4 (drop perl version dep)
* Add myself to Uploaders and Copyright
* Rewrite control description
* Use new short debhelper rules format
* Use 3.0 (quilt) source format
* Update copyright information
* Move to new DEP5 copyright format
* Add a patch to fix POD spelling errors
.
[ gregor herrmann ]
* debian/control: Changed: Switched Vcs-Browser field to ViewSVN
(source stanza).
* debian/control: Added: ${misc:Depends} to Depends: field.
.
[ Nathan Handler ]
* debian/watch: Update to ignore development releases.
.
[ gregor herrmann ]
* debian/watch: add uversionmangle to catch potential two-digit versions in
the future.
Checksums-Sha1:
07ee7ca6ff376595ca4c12c30e2d2caf25acde3b 2204 libnet-ldap-perl_0.4001-1.dsc
22caf31ca3eddc4f6fe5793bc8928e1f3bc118ca 254232
libnet-ldap-perl_0.4001.orig.tar.gz
38684c9131326fe15418a8623c5808b27a303484 7372
libnet-ldap-perl_0.4001-1.debian.tar.gz
3886b32c7dd48f362f321a11b483bb126773d4c8 374500
libnet-ldap-perl_0.4001-1_all.deb
Checksums-Sha256:
7f5aa92ea9aa1ba983fea724d4dfaf8dec605a370aa7b6f08c872c9a1f4c5777 2204
libnet-ldap-perl_0.4001-1.dsc
fae2cf183b6b214ee904eea854ea84ba54b13ce28d8ea6d62f70760f4e8bfc6a 254232
libnet-ldap-perl_0.4001.orig.tar.gz
b3e783c4b0839c979f5ada1b9f0361f1c5dfea92dd713aa55ffb525e259cdf4c 7372
libnet-ldap-perl_0.4001-1.debian.tar.gz
72bb03203a76cf8e9f1f6c5338a478f74c6d70858faff71a9fe221fa03719fcf 374500
libnet-ldap-perl_0.4001-1_all.deb
Files:
57110c374ed47ac60ebc50fdf03a17f9 2204 perl optional
libnet-ldap-perl_0.4001-1.dsc
f30af2904b093fa81a42ab682ca440a6 254232 perl optional
libnet-ldap-perl_0.4001.orig.tar.gz
c9dbae313bc271e1bf9fd26062d404be 7372 perl optional
libnet-ldap-perl_0.4001-1.debian.tar.gz
c58803003e5b3933c488e289fa0f29b3 374500 perl optional
libnet-ldap-perl_0.4001-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iQIcBAEBCAAGBQJLt4Z9AAoJELs6aAGGSaoGb8YP/iv+BDc7sXEvXxD6HTs1TNfp
fnWVBr1N3LOC0WZhcdS1MRlLupnhC4q43KvwdKxa7Pkt0IrM4t8/JLG26g5UTkJz
p16LhwKkJDNdohwxGQmr+WQxJTYm+WmNp63NA07J/X5x5kE1U2/4N3ia5v/IxXvd
Xg4QRARZpz+pM9dH1tQMm/anDhCadMKoiOv2RSLJiuyC8VMusbTxYypNSM7wnz0J
k+5WQqO9SZOUkydhpcRC/kwQgk2SDUNqKglpYC4QCUq1fNM+LPng5mF9HYbm+wXJ
Ne2bs8azlAU+pNFbdHwzXEoAyBw88RprncZYgjdxzLfxQYpdWsYezuKq0aJU6MQG
SIf6Rd09S4Op3JTDZVPgo1kedsUaEZeradc6OHAsrTc10jQaliMsDr044NXvy5pD
vcHrJBFh27lXzObNJA4aN9JmrCvfsAVoyIuAykUGU8xEYjnNSLzXrzNOKH0OHOG/
XCJaCiFgoApOTs2U+K83ggeMHDMar9uCUXxgCWDmvk3LnMeCiMVVEXjzcWrNO6m5
AM6Bzbh+9H70LK4fEy20p8wZbIMetfH2Tnjj5RbZQ0mB0/ov+fjXvbu89Dg7FPwE
NcQ4rwIC3a6A6REQ9f9w3yg4TOUJeaL277hxD2WmdH1IyyIR+xxeRtxsD9jo7cit
8m1h4RFp5b2Ga8jRtFsY
=BKhp
-----END PGP SIGNATURE-----
--- End Message ---
