Hi,

unfortunately the patch does not solve the problem.
I believe that the patch generates the wrong
links to phpseclib/Crypt/AES.php instead of
../phpseclib/Crypt/AES.php . Please find my modified
patch attached which results in:

ls /usr/share/php/Crypt/ -l
totaal 0
lrwxrwxrwx 1 root root 26 feb 13 06:25 AES.php -> ../phpseclib/Crypt/AES.php
lrwxrwxrwx 1 root root 27 feb 13 06:25 Base.php -> ../phpseclib/Crypt/Base.php lrwxrwxrwx 1 root root 31 feb 13 06:25 Blowfish.php -> ../phpseclib/Crypt/Blowfish.php
lrwxrwxrwx 1 root root 26 feb 13 06:25 DES.php -> ../phpseclib/Crypt/DES.php
lrwxrwxrwx 1 root root 27 feb 13 06:25 Hash.php -> ../phpseclib/Crypt/Hash.php lrwxrwxrwx 1 root root 29 feb 13 06:25 Random.php -> ../phpseclib/Crypt/Random.php
lrwxrwxrwx 1 root root 26 feb 13 06:25 RC2.php -> ../phpseclib/Crypt/RC2.php
lrwxrwxrwx 1 root root 26 feb 13 06:25 RC4.php -> ../phpseclib/Crypt/RC4.php
lrwxrwxrwx 1 root root 31 feb 13 06:25 Rijndael.php -> ../phpseclib/Crypt/Rijndael.php
lrwxrwxrwx 1 root root 26 feb 13 06:25 RSA.php -> ../phpseclib/Crypt/RSA.php
lrwxrwxrwx 1 root root 32 feb 13 06:25 TripleDES.php -> ../phpseclib/Crypt/TripleDES.php lrwxrwxrwx 1 root root 30 feb 13 06:25 Twofish.php -> ../phpseclib/Crypt/Twofish.php

After applying the modified patch,
apaches error_log now complains:

[Mon Feb 13 15:38:31.195635 2017] [:error] [pid 11065]
[client 127.0.0.1:36936] PHP Fatal error:
Class 'phpseclib\\Crypt\\Rijndael' not found in
/usr/share/php/phpseclib/Crypt/AES.php on line 59,
referer: http://localhost/dokuwiki/doku.php?id=start&do=login&sectok=0ed612230c760db559e

So although the file Crypt/AES.php is now found, it
cannot import other classes from there any further.

Joost


diff -Nru php-phpseclib-2.0.4/debian/changelog php-phpseclib-2.0.4/debian/changelog
--- php-phpseclib-2.0.4/debian/changelog	2016-10-21 10:34:04.000000000 +0900
+++ php-phpseclib-2.0.4/debian/changelog	2017-02-13 14:25:16.000000000 +0900
@@ -1,3 +1,13 @@
+php-phpseclib (2.0.4-1.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * debian/rules
+    - fix breakage of PATH difference (Closes: #854592) 
+  * debian/control
+    - fix insecure Vcs-* field
+
+ -- Hideki Yamane <[email protected]>  Mon, 13 Feb 2017 14:25:16 +0900
+
 php-phpseclib (2.0.4-1) unstable; urgency=medium
 
   * New upstream release
diff -Nru php-phpseclib-2.0.4/debian/control php-phpseclib-2.0.4/debian/control
--- php-phpseclib-2.0.4/debian/control	2016-10-21 10:34:04.000000000 +0900
+++ php-phpseclib-2.0.4/debian/control	2017-02-13 14:25:16.000000000 +0900
@@ -6,8 +6,8 @@
 Build-Depends: debhelper (>= 9), phpab, pkg-php-tools (>= 1.7~)
 Standards-Version: 3.9.8
 Homepage: http://phpseclib.sourceforge.net/
-Vcs-Git: git://anonscm.debian.org/pkg-php/phpseclib.git
-Vcs-Browser: http://anonscm.debian.org/gitweb/?p=pkg-php/phpseclib.git
+Vcs-Git: https://anonscm.debian.org/cgit/pkg-php/phpseclib.git
+Vcs-Browser: https://anonscm.debian.org/git/pkg-php/phpseclib.git
 
 Package: php-phpseclib
 Architecture: all
diff -Nru php-phpseclib-2.0.4/debian/rules php-phpseclib-2.0.4/debian/rules
--- php-phpseclib-2.0.4/debian/rules	2016-10-21 10:34:04.000000000 +0900
+++ php-phpseclib-2.0.4/debian/rules	2017-02-13 14:25:16.000000000 +0900
@@ -11,6 +11,11 @@
 override_dh_install:
 	dh_install -Xopenssl.cnf
 
+override_dh_link:
+	(cd $(CURDIR)/debian/php-phpseclib/usr/share/php; \
+         for dir in `find . -type d -print`; do mkdir -p `echo $$dir | sed -e s%./phpseclib/%%`; done ;\
+         for file in `find . -name '*.php' -print`; do ln -sf `echo $$file| sed -e s%^./%../%` `echo $$file | sed -e s%./phpseclib/%%`; done)
+
 override_dh_installchangelogs:
 	dh_installchangelogs debian/upstream/changelog
 

Attachment: smime.p7s
Description: S/MIME-cryptografische ondertekening

Reply via email to