[pkgsrc/trunk]: pkgsrc/devel/p5-Storable Update to 3.09

[wen <wen%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/23e65ceb0c48
branches:  trunk
changeset: 379046:23e65ceb0c48
user:      wen <wen%pkgsrc.org@localhost>
date:      Sun Apr 22 11:54:57 2018 +0000

description:
Update to 3.09

Upstream changes:
    Version 3.09
        * Fix "provides" in metadata (META.yml/META.json) to use the Storable
          template instead of a small other file (which also didn't exist).

2018-04-21 11:23:00 xsawyerx
    Version 3.08
        * (perl #132849) try to disable core files when deliberatly segfaulting.
        * (perl #127743) don't probe Storable limits so much.
        * (perl #132893) don't probe for Storable recursion limits on old Win32.
        * (perl #132870) workaround VC2017 compiler bug.
        * (perl #127743) re-work for debugging builds with MSVC.
        * (perl #133039) dont build a Storable.so/.dll with a static perl build.

2018-02-07 15:08:00 tonyc
    Version 3.06

        * support large object ids.  The code in theory supported arrays
        with more than 2**32 elements, but references to the elements
        emitted at the end of the array with be retrieved as references to
        the wrong elements.
        * 32-bit object ids over 2**31-1 weren't correctly handled.
        * hook object id generation now supports 64-bit ids where needed
        * writing 64-bit lengths in network order now works
        * reading 64-bit lengths in network order now reads the components
        in the correct order.
        * retrieving large object tags are now only handled on 64-bit
        platforms, large object tags should only be emitted for objects
        that are too large for the 32-bit address space, so it was only
        wasted code.
        * reading 32-bit lengths for LSCALAR and LUTF8STR as unsigned
        (perl #131990)
        * reading flagged large object hashes didn't read the flags
        * treat the 32-bit size of hook data as unsigned, values over 2GB
        were treated as large (close to 2**64) parameters to NEWSV().
        (perl #131999)
        * added support for hook data over 4GB in size
        * zero length data receievd from STORABLE_freeze() no longer
        results in an invalid SV being passed to STORABLE_thaw/_attach()
        (perl #118551)
        * where practical, padding is now cleared when emitting a long
        double (perl #131136)
        * cache the value of $Storable::DEBUGME (since cperl enabled
        Storable TRACEME builds for all -DDEBUGGING builds)
        * no longer discard exceptions thrown by
        STORABLE_freeze/_thaw/attach() (perl #25933)
        * fix dependencies used to build Storable.pm from __Storable__.pm
        * add experimental support for freezing/thawing regular
        expressions (perl #50608)
        * re-work recursion limiting to store the limit in a perl variable
        instead of baked into Storable.$so.  This allows static Storable
        builds to work, and avoids the kind of circular reference on
        Storable.$so.

2017-07-24 13:57:13 rurban
    Version 3.05_13

        * mingw fix: use safe defaults, not segfaulting defaults.
        mingw fails on the stacksize binary search, leaving it empty.

Wed Apr 19 09:11:07 2017 +0200 Reini Urban <rurban%cpan.org@localhost>
    Version 3.05_12

        * enhance stack reserve from 8 to 16
        * fix LD_LIBRARY_PATH usage for CORE
        * fixed some coverity warnings and leaks
        * added a release make target

Wed Mar 29 21:04:28 2017 +0200 Reini Urban <rurban%cpan.org@localhost>
    Version 3.05_11

        * croak on sizes read > I32_MAX
        * simplify last_op_in_netorder
        * protect from empty retrieve_vstring
        * protect store_other error buf, potential static
        buffer overflow.

Tue Mar 14 09:52:20 2017 +0100 Reini Urban <rurban%cpan.org@localhost>
    Version 3.05_10

        * CORE-only improvements to stacksize

Thu Mar 9 19:20:19 2017 +0100 Reini Urban <rurban%cpan.org@localhost>
    Version 3.05_09

        * compute the stacksizes, improve cleanup within croak
        from stack exhaustion.
        * added stack_depth and stack_depth_hash getters.

Wed Mar  8 21:03:43 CET 2017 Reini Urban <rurban%cpan.org@localhost>
    Version 3.05_08

        * finetune the max stack limit, for C++, DEBUGGING and 32bit.
        * fix t/blessed.t for cperl5.22

Sun Mar 5 13:36:47 2017 +0100 Reini Urban <rurban%cpan.org@localhost>
    Version 3.05_07

        * Fixed a podchecker issue

Sun Mar 5 11:42:04 2017 +0100 Reini Urban <rurban%cpan.org@localhost>
    Version 3.05_06

        * Fixed wrong recursion depth error with large arrays containing
        another array.
        L<[cperl #257]|https://github.com/perl11/cperl/issues/257>

Thu Feb 2 12:40:44 2017 +0100 Reini Urban <rurban%cpanel.net@localhost>
    Version 3.05_05

        * Add leak tests for [cpan #97316], [perl #121928]
        * Limit the max recursion depth to 1200 on 32bit systems.
        We have no max_depth option yet, as in JSON::XS.

Thu Feb 2 11:59:21 2017 +0100 Reini Urban <rurban%cpanel.net@localhost>
    Version 3.05_04

        * Fix retrieve_tied_array which fails since 5.16
        [cpan #84705]
        * Improve t/blessed.t in the creation of sv_yes/sv_no
        with threaded perls.

Tue Jan 31 02:55:30 2017 +0100 Reini Urban <rurban%cpanel.net@localhost>
    Version 3.05_03

        * Tune t/recurse.t stack-overflow limit more.

Mon Jan 30 19:50:29 2017 +0100 Reini Urban <rurban%cpanel.net@localhost>
    Version 3.05_02

        * Tune t/recurse.t stack-overflow limit. Small 64bit systems overflow
        even with depth 3000, where 32bit are ok.

Mon Jan 30 15:13:38 2017 +0100 Reini Urban <rurban%cpanel.net@localhost>
    Version 3.05_01

        * Protect against stack overflows with nested arrays and hashes
        [cpan #97526]. This imposes a new limit to your nested structures,
        but JSON::XS has a limit of 512. We use a max_depth of 3000 for the
        typical stack limit of 8k.


Sun Jan 29 11:36:43 2017 +0100 Reini Urban <rurban%cpanel.net@localhost>
    Version 3.05

        * Protect against classname len overflow on the stack
        and 2x on the heap with retrieve_bless and retrieve_hook.
        A serious security issue with malcrafted storable files or buffers,
        but p5p accepts no CVE on Storable attacks. See RT #130635
        (reported by JD).
        * Fix NULL ptr SEGVs with retrieve_code and retrieve_other.
        See RT #130098 (reported and fixed by JD)
        * Fix wrong huge LOBJECT support, broken since 3.00c.
        Repro with `export PERL_TEST_MEMORY=8`
        * Fix the few remaining 2-arg open calls.
        * Portability and backport fixes back to 5.6.2

Sat Jan 7 09:01:29 2017 +0100 Reini Urban <rurban%cpanel.net@localhost>
    Version 3.04c

        * fix printf types and warnings, esp. for 32bit use64bitint
        * Change sv_setpvn(??, "??", ??) to sv_setpvs(??, "??")

Tue Jul 26 11:49:33 2016 +1000 Tony Cook <tony%develop-help.com@localhost>
    Version 3.03c

        * remove . from @INC when loading optional modules

Sun Nov 20 18:06:45 2016 +0100 Reini Urban <rurban%cpanel.net@localhost>
    Version 3.02c

        * Fix -Wc++11-compat warnings, fix -Wchar-subscripts

Fri Sep 16 01:32:59 2016 +0200 Reini Urban <rurban%cpanel.net@localhost>
    Version 3.01c

        * Added warn_security("Movable-Type CVE-2015-1592 Storable metasploit attack")
          when detecting the third destructive metasploit vector,
          thawing bless \"mt-config.cgi", "CGITempFile".

Thu Mar 31 17:10:27 2016 +0200 Reini Urban <rurban%cpanel.net@localhost>
    Version 3.00c

        * Added support for u64 strings, arrays and hashes >2G
          via a new LOBJECT tag. This is for 32bit systems and lengths
          between 2GB and 4GB (I32-U32), and 64bit (>I32).
        * Bumped STORABLE_BIN_MINOR and STORABLE_BIN_WRITE_MINOR from 10 to 11
        * fix parallel tests, use unique filenames.
        * fixed 2 instances of 2arg open,
        * added optional flag arguments to skip tie and bless on retrieve/thaw,
        * added SECURITY WARNING and Large data support to docs
        * compute CAN_FLOCK at compile-time
        * reformat everything consistently
        * enable DEBUGME tracing and asserts with -DDEBUGGING
        * fix all 64 bit compiler warnings
        * added some abstraction methods to avoid code duplication

?????? p5p <perl5-porters%perl.org@localhost>
    Version 2.65

        * Replace multiple 'use vars' by 'our'
        * remove Config dependency

diffstat:

 devel/p5-Storable/Makefile |   5 ++---
 devel/p5-Storable/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 8 deletions(-)

diffs (29 lines):

diff -r 4f8f06713015 -r 23e65ceb0c48 devel/p5-Storable/Makefile
--- a/devel/p5-Storable/Makefile        Sun Apr 22 11:49:51 2018 +0000
+++ b/devel/p5-Storable/Makefile        Sun Apr 22 11:54:57 2018 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.46 2017/06/05 14:23:36 ryoon Exp $
+# $NetBSD: Makefile,v 1.47 2018/04/22 11:54:57 wen Exp $
 
-DISTNAME=      Storable-2.51
+DISTNAME=      Storable-3.09
 PKGNAME=       p5-${DISTNAME}
-PKGREVISION=   3
 CATEGORIES=    devel perl5
 MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=Storable/}
 
diff -r 4f8f06713015 -r 23e65ceb0c48 devel/p5-Storable/distinfo
--- a/devel/p5-Storable/distinfo        Sun Apr 22 11:49:51 2018 +0000
+++ b/devel/p5-Storable/distinfo        Sun Apr 22 11:54:57 2018 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.21 2015/11/03 03:28:45 agc Exp $
+$NetBSD: distinfo,v 1.22 2018/04/22 11:54:57 wen Exp $
 
-SHA1 (Storable-2.51.tar.gz) = 3ccd6ac2b898aa589ac5c6dd73d6b600f5192a47
-RMD160 (Storable-2.51.tar.gz) = b5b299fc48fce0dc77e203c2f7e53163b074825a
-SHA512 (Storable-2.51.tar.gz) = e14de78d652e9708d4768041e13c470b0201d49edd85311177c334416ce8419f596094c193d9d223cce8bb3401f1d512de4be45817f5a02d0e883096e78c4586
-Size (Storable-2.51.tar.gz) = 185489 bytes
+SHA1 (Storable-3.09.tar.gz) = a349f20369035ed1b3ac448abd53868b5bb9517a
+RMD160 (Storable-3.09.tar.gz) = 7a7f7f61678cd0ae949267b4be6f396072c3ff15
+SHA512 (Storable-3.09.tar.gz) = d90f673386c61602b4b57061f31c20fbe33b7f281d6a0a5ed07676a791c8182e4de6af711c3f4083f8c9271a251e2773eebc261f8144746691dd02e8640be3c1
+Size (Storable-3.09.tar.gz) = 306904 bytes