Bug#717213: libmodule-load-conditional-perl: causes perl -TMRDF::Trine to fail with taint error

[brian m. carlson]

Package: libmodule-load-conditional-perl
Version: 0.52-1
Severity: important

Running perl -TMRDF::Trine causes a taint error:

  vauxhall no % perl -TMRDF::Trine                  
  Insecure dependency in eval while running with -T switch at /usr/share/perl5/Module/Metadata.pm line 631, <GEN0> line 40.
  BEGIN failed--compilation aborted at /usr/share/perl5/RDF/Trine.pm line 92.
  Compilation failed in require.
  BEGIN failed--compilation aborted.

Despite the message indicating Module::Metadata, this is actually a bug
in Module::Load::Conditional, because leaving libmodule-metadata-perl
installed while removing libmodule-load-conditional-perl (since an older
version is provided by perl) makes it work.  This makes a script that
used to work fine with -T no longer work.

In my particular case, removing this package is not a valid solution
since libmoox-options-perl requires it, and I need that for other
things.

Below is a full traceback with Carp::Always:

  vauxhall no % perl -TMCarp::Always -MRDF::Trine 
  Insecure dependency in eval while running with -T switch at /usr/share/perl5/Module/Metadata.pm line 631
  	Module::Metadata::_evaluate_version_line('Module::Metadata=HASH(0x2865d78)', '$', 'VERSION', '\x{9}$VERSION\x{9}= "1.006";') called at /usr/share/perl5/Module/Metadata.pm line 580
  	Module::Metadata::_parse_fh('Module::Metadata=HASH(0x2865d78)', 'FileHandle=GLOB(0x28bf528)') called at /usr/share/perl5/Module/Metadata.pm line 358
  	Module::Metadata::_init('Module::Metadata', undef, '/usr/share/perl5/RDF/Trine/Store/Redland.pm', 'handle', 'FileHandle=GLOB(0x28bf528)') called at /usr/share/perl5/Module/Metadata.pm line 79
  	Module::Metadata::new_from_handle('Module::Metadata', 'FileHandle=GLOB(0x28bf528)', '/usr/share/perl5/RDF/Trine/Store/Redland.pm') called at /usr/share/perl5/Module/Load/Conditional.pm line 257
  	Module::Load::Conditional::check_install('module', 'RDF::Trine::Store::Redland', 'version', undef) called at /usr/share/perl5/Module/Load/Conditional.pm line 415
  	Module::Load::Conditional::can_load('modules', 'HASH(0x28bee50)') called at /usr/share/perl5/RDF/Trine.pm line 86
  	RDF::Trine::BEGIN() called at /usr/share/perl5/RDF/Trine.pm line 92
  	eval {...} called at /usr/share/perl5/RDF/Trine.pm line 92
  	require RDF/Trine.pm called at - line 0
  	main::BEGIN() called at /usr/share/perl5/RDF/Trine.pm line 92
  	eval {...} called at /usr/share/perl5/RDF/Trine.pm line 92
  BEGIN failed--compilation aborted at /usr/share/perl5/RDF/Trine.pm line 92
  	require RDF/Trine.pm called at - line 0
  	main::BEGIN() called at /usr/share/perl5/RDF/Trine.pm line 92
  	eval {...} called at - line 0
  	main::BEGIN() called at - line 0
  	eval {...} called at - line 0


-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.10-rc7-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libmodule-load-conditional-perl depends on:
ii  libmodule-metadata-perl                 1.000011-1
ii  perl                                    5.14.2-21
ii  perl-modules [libmodule-metadata-perl]  5.14.2-21

libmodule-load-conditional-perl recommends no packages.

libmodule-load-conditional-perl suggests no packages.

-- no debconf information

-- 
brian m. carlson / brian with sandals: Houston, Texas, US
+1 832 623 2791 | http://www.crustytoothpaste.net/~bmc | My opinion only
OpenPGP: RSA v4 4096b: 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-perl-maintainers/attachments/20130718/3c85b077/attachment.sig>