35 lines
1.2 KiB
Perl
35 lines
1.2 KiB
Perl
$NetBSD: patch-lib_RT.pm,v 1.2 2015/03/01 22:45:26 spz Exp $
|
|
|
|
perl 5.14 qw() in for* fixes
|
|
Fix for CVE-2014-9472 taken from the patch for RT 4.0.0
|
|
|
|
--- lib/RT.pm.orig 2013-05-22 19:04:26.000000000 +0000
|
|
+++ lib/RT.pm
|
|
@@ -362,6 +362,8 @@ sub InitSignalHandlers {
|
|
## mechanism (see above).
|
|
|
|
$SIG{__WARN__} = sub {
|
|
+ return 'IGNORE' if $_[0] and $_[0] =~ /^Code point \S+ is not Unicode, may not be portable/;
|
|
+
|
|
# The 'wide character' warnings has to be silenced for now, at least
|
|
# until HTML::Mason offers a sane way to process both raw output and
|
|
# unicode strings.
|
|
@@ -459,7 +461,7 @@ sub InitClasses {
|
|
# in the session, as we deserialize it so we never call constructor
|
|
# of the class, so the list of accessible fields is empty and we die
|
|
# with "Method xxx is not implemented in RT::SomeClass"
|
|
- $_->_BuildTableAttributes foreach qw(
|
|
+ $_->_BuildTableAttributes foreach ( qw(
|
|
RT::Ticket
|
|
RT::Transaction
|
|
RT::Attachment
|
|
@@ -477,7 +479,7 @@ sub InitClasses {
|
|
RT::ObjectCustomField
|
|
RT::ObjectCustomFieldValue
|
|
RT::Attribute
|
|
- );
|
|
+ ) );
|
|
|
|
if ( $args{'Heavy'} ) {
|
|
# load scrips' modules
|