Re: Bug#702821: perl/hash_attack.t fails with 5.10.1 + CVE-2013-1667 fix

2013-03-15 Thread Salvatore Bonaccorso
Hi On Fri, Mar 15, 2013 at 05:56:05PM -, Steve Hay wrote: [...] > Zefram has now come up with an even better patch (on the same RT > ticket), after reproducing the Debian 5.10.1 failure himself. > > Please take a look (I've also attached it here for your convenience) and > let me know whether

RE: perl/hash_attack.t fails with 5.10.1 + CVE-2013-1667 fix

2013-03-15 Thread Steve Hay
Steve Hay wrote on 2013-03-14: > Niko Tyni wrote on 2013-03-13: >> On Wed, Mar 13, 2013 at 09:13:15AM -, Steve Hay wrote: >>> Dominic Hargreaves wrote on 2013-03-12: >> When trying to fix this issue in Debian stable, I found that the patch at http://svn.apache.org/viewvc?v

Re: Bug#702821: perl/hash_attack.t fails with 5.10.1 + CVE-2013-1667 fix

2013-03-14 Thread Salvatore Bonaccorso
Hi all On Thu, Mar 14, 2013 at 08:54:06AM -, Steve Hay wrote: > Niko Tyni wrote on 2013-03-13: > > On Wed, Mar 13, 2013 at 09:13:15AM -, Steve Hay wrote: > >> Dominic Hargreaves wrote on 2013-03-12: > > > >>> When trying to fix this issue in Debian stable, I found that the > patch > >>> a

RE: perl/hash_attack.t fails with 5.10.1 + CVE-2013-1667 fix

2013-03-14 Thread Steve Hay
Niko Tyni wrote on 2013-03-13: > On Wed, Mar 13, 2013 at 09:13:15AM -, Steve Hay wrote: >> Dominic Hargreaves wrote on 2013-03-12: > >>> When trying to fix this issue in Debian stable, I found that the patch >>> at >>> >>> http://svn.apache.org/viewvc?view=revision&revision=1455340 >>> >>> d

Re: perl/hash_attack.t fails with 5.10.1 + CVE-2013-1667 fix

2013-03-13 Thread Niko Tyni
On Wed, Mar 13, 2013 at 09:13:15AM -, Steve Hay wrote: > Dominic Hargreaves wrote on 2013-03-12: > > When trying to fix this issue in Debian stable, I found that the patch > at > > > > http://svn.apache.org/viewvc?view=revision&revision=1455340 > > > > does not stop the test failing when app

RE: perl/hash_attack.t fails with 5.10.1 + CVE-2013-1667 fix

2013-03-13 Thread Steve Hay
Dominic Hargreaves wrote on 2013-03-12: > Hello, > > When trying to fix this issue in Debian stable, I found that the patch at > > http://svn.apache.org/viewvc?view=revision&revision=1455340 > > does not stop the test failing when applied to 2.0.4 (as currently > found in Debian stable) and buil

perl/hash_attack.t fails with 5.10.1 + CVE-2013-1667 fix

2013-03-12 Thread Dominic Hargreaves
Hello, When trying to fix this issue in Debian stable, I found that the patch at http://svn.apache.org/viewvc?view=revision&revision=1455340 does not stop the test failing when applied to 2.0.4 (as currently found in Debian stable) and built against the current perl package in Debian stable (5.1