Bug#832936: perl: base.pm diagnostics lie about @INC

[Niko Tyni]

close 832936 5.24.1~rc3-1
found 832936 5.22.2-5
tag 832936 + jessie wheezy
thanks

On Fri, Jul 29, 2016 at 09:24:22PM +0300, Niko Tyni wrote:
> Package: perl
> Version: 5.22.2-3
> Control: found -1 5.20.2-3+deb8u6
> 
> With the CVE-2016-1238 patch that made base.pm temporarily remove cwd
> from @INC when trying to load the base module, a later error message
> has now become misleading and needs editing.
> 
> % perl -e 'use base qw(foobar)'
> Base class package "foobar" is empty.
>     (Perhaps you need to 'use' the module which defines that package first,
>     or make that module available in @INC (@INC contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.22.2 /usr/local/share/perl/5.22.2 /usr/lib/x86_64-linux-gnu/perl5/5.22 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.22 /usr/share/perl/5.22 /usr/local/lib/site_perl /usr/local/lib/x86_64-linux-gnu/perl/5.22.1 /usr/lib/x86_64-linux-gnu/perl-base .).
>  at -e line 1.
> BEGIN failed--compilation aborted at -e line 1.
> 
> Note that '.' is listed there because the @INC cleansing is no longer
> in effect.

Fixed in experimental/5.24 but not in sid/5.22 (though we now remove
'.' by default in sid, so this gets masked.)

We might want to fix this in jessie+wheezy.
-- 
Niko Tyni   ntyni at debian.org