%global base_version 2.51

Name:           perl-Storable

Epoch:          1

Version:        2.56

Release:        369%{?dist}

Summary:        Persistence for Perl data structures

License:        GPL+ or Artistic

Group:          Development/Libraries

URL:            http://search.cpan.org/dist/Storable/

Source0:        http://www.cpan.org/authors/id/A/AM/AMS/Storable-%{base_version}.tar.gz

# Unbundled from perl 5.21.11

Patch0:         Storable-2.51-Upgrade-to-2.53.patch

# Unbundled from perl 5.24.0

Patch1:         Storable-2.53-Upgrade-to-2.56.patch

# Avoid loading optional modules from default . (CVE-2016-1238)

Patch2:         Storable-2.56-CVE-2016-1238-avoid-loading-optional-modules-from.patch

# Fix crash in Storable when deserializing malformed code reference, RT#68348,

# RT130098

Patch3:         perl-5.25.7-Fix-Storable-segfaults.patch

# Fix a stack buffer overflow in deserialization of hooks, RT#130635,

# fixed in perl after 5.25.9

Patch4:         Storable-2.56-Fix-stack-buffer-overflow-in-deserialization-of-hook.patch

# Fix a memory leak of a class name from retrieve_hook() on an exception,

# RT#130635, fixed in perl after 5.25.9

Patch5:         Storable-2.56-prevent-leak-of-class-name-from-retrieve_hook-on-an-.patch

BuildRequires:  coreutils

BuildRequires:  gcc

BuildRequires:  make

BuildRequires:  perl

BuildRequires:  perl-devel

BuildRequires:  perl-generators

BuildRequires:  perl(Config)

BuildRequires:  perl(ExtUtils::MakeMaker)

BuildRequires:  sed

# Run-time:

# Carp substitutes missing Log::Agent

BuildRequires:  perl(Carp)

BuildRequires:  perl(Exporter)

# Fcntl is optional, but locking is good

BuildRequires:  perl(Fcntl)

BuildRequires:  perl(IO::File)

# Log::Agent is optional

BuildRequires:  perl(vars)

BuildRequires:  perl(XSLoader)

# Tests:

BuildRequires:  perl(bytes)

BuildRequires:  perl(integer)

BuildRequires:  perl(overload)

BuildRequires:  perl(utf8)

BuildRequires:  perl(Test::More)

BuildRequires:  perl(threads)

BuildRequires:  perl(Safe)

BuildRequires:  perl(Scalar::Util)

BuildRequires:  perl(strict)

BuildRequires:  perl(warnings)

# Optional tests:

# Data::Dump not used

# Data::Dumper not used

BuildRequires:  perl(B::Deparse) >= 0.61

BuildRequires:  perl(Digest::MD5)

BuildRequires:  perl(File::Spec) >= 0.8

BuildRequires:  perl(Hash::Util)

BuildRequires:  perl(Tie::Hash)

Requires:       perl(:MODULE_COMPAT_%(eval "`perl -V:version`"; echo $version))

# Carp substitutes missing Log::Agent

Requires:       perl(Carp)

Requires:       perl(Config)

# Fcntl is optional, but locking is good

Requires:       perl(Fcntl)

Requires:       perl(IO::File)

%{?perl_default_filter}

%description

The Storable package brings persistence to your Perl data structures

containing scalar, array, hash or reference objects, i.e. anything that

can be conveniently stored to disk and retrieved at a later time.

%prep

%setup -q -n Storable-%{base_version}

%patch0 -p1

%patch1 -p1

%patch2 -p1

%patch3 -p3

%patch4 -p1

%patch5 -p1

# Remove bundled modules

rm -rf t/compat

sed -i -e '/^t\/compat\//d' MANIFEST

%build

# Be ware hints/linux.pl removes "-ON" from CFLAGS if N > 2 because it can

# break the code.

perl Makefile.PL INSTALLDIRS=vendor OPTIMIZE="$RPM_OPT_FLAGS"

make %{?_smp_mflags}

%install

make pure_install DESTDIR=$RPM_BUILD_ROOT

find $RPM_BUILD_ROOT -type f -name .packlist -delete

find $RPM_BUILD_ROOT -type f -name '*.bs' -size 0 -delete

%{_fixperms} $RPM_BUILD_ROOT/*

%check

make test

%files

%doc ChangeLog README

%{perl_vendorarch}/auto/*

%{perl_vendorarch}/Storable*

%{_mandir}/man3/*

%changelog

* Fri Mar 29 2019 Jitka Plesnikova <jplesnik@redhat.com> - 1:2.56-369

- Rebuild with enable hardening (bug #1636329)

* Mon Feb 06 2017 Petr Pisar <ppisar@redhat.com> - 1:2.56-368

- Fix a stack buffer overflow in deserialization of hooks (RT#130635)

- Fix a memory leak of a class name from retrieve_hook() on an exception

  (RT#130635)

* Tue Dec 20 2016 Petr Pisar <ppisar@redhat.com> - 1:2.56-367

- Fix crash in Storable when deserializing malformed code reference

  (RT#68348, RT#130098)

* Wed Aug 03 2016 Jitka Plesnikova <jplesnik@redhat.com> - 1:2.56-366

- Avoid loading optional modules from default . (CVE-2016-1238)

* Sat May 14 2016 Jitka Plesnikova <jplesnik@redhat.com> - 1:2.56-365

- Increase release to favour standalone package

* Wed May 11 2016 Jitka Plesnikova <jplesnik@redhat.com> - 2.56-1

- 2.56 bump in order to dual-live with perl 5.24

* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1:2.53-347

- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

* Thu Jun 18 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:2.53-346

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Thu Jun 04 2015 Jitka Plesnikova <jplesnik@redhat.com> - 1:2.53-345

- Increase release to favour standalone package

* Wed Jun 03 2015 Jitka Plesnikova <jplesnik@redhat.com> - 1:2.53-2

- Perl 5.22 rebuild

* Wed May 06 2015 Petr Pisar <ppisar@redhat.com> - 1:2.53-1

- 2.53 bump in order to dual-live with perl 5.22

* Wed Sep 03 2014 Jitka Plesnikova <jplesnik@redhat.com> - 1:2.51-4

- Increase Epoch to favour standalone package

* Tue Aug 26 2014 Jitka Plesnikova <jplesnik@redhat.com> - 2.51-3

- Perl 5.20 rebuild

* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.51-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

* Mon Jul 07 2014 Petr Pisar <ppisar@redhat.com> - 2.51-1

- 2.51 bump

* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.45-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.45-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

* Mon Jul 15 2013 Petr Pisar <ppisar@redhat.com> - 2.45-1

- 2.45 bump

* Fri Jul 12 2013 Petr Pisar <ppisar@redhat.com> - 2.39-3

- Link minimal build-root packages against libperl.so explicitly

* Tue Jun 11 2013 Petr Pisar <ppisar@redhat.com> - 2.39-2

- Do not export private libraries

* Fri May 24 2013 Petr Pisar <ppisar@redhat.com> 2.39-1

- Specfile autogenerated by cpanspec 1.78.