Re: [RELEASE CANDIDATE] mod_perl-2.0.11 RC2

Hello Steve,

I have tested it in two ways:

1) Installation via freebsd port system via fooling the port about 
distro checksum.

Installed successful on

	1) FreeBSD 11.2-STABLE
	2) apache-2.4.37
	3) perl 5, version 26

Installation via port is made without modifying t/ files ( F_NAME -> 
F_NORM )
Application looks to work without issues.
If we spot some errors I will write here.


2) I ran tests after modification in t files F_NAME -> F_NORM, as 
suggest in this thread. The results are bellow:


> t/apache/add_config.t ................... ok   
> t/apache/cgihandler.t ................... ok   
> t/apache/conftree.t ..................... ok         
> t/apache/constants.t .................... ok     
> t/apache/content_length_header.t ........ ok     
> t/apache/daemon.t ....................... ok   
> t/apache/discard_rbody.t ................ ok   
> t/apache/post.t ......................... ok   
> t/apache/read.t ......................... ok   
> t/apache/read2.t ........................ ok   
> t/apache/read3.t ........................ ok   
> t/apache/read4.t ........................ ok     
> t/apache/scanhdrs.t ..................... ok   
> t/apache/scanhdrs2.t .................... ok   
> t/apache/send_cgi_header.t .............. ok   
> t/apache/subprocess.t ................... ok   
> t/apache/util.t ......................... ok   
> t/apache/write.t ........................ ok   
> t/api/access.t .......................... ok     
> t/api/access2.t ......................... skipped: mod_perl is not compiled with httpd-2.2
> t/api/access2_24.t ...................... ok   
> t/api/add_config.t ...................... ok   
> t/api/aplog.t ........................... ok     
> t/api/command.t ......................... ok   
> t/api/conn_rec.t ........................ ok     
> t/api/conn_util.t ....................... ok   
> t/api/content_encoding.t ................ ok   
> t/api/custom_response.t ................. ok   
> t/api/err_headers_out.t ................. ok   
> t/api/in_out_filters.t .................. ok   
> t/api/internal_redirect.t ............... ok   
> t/api/internal_redirect_handler.t ....... ok   
> t/api/lookup_misc.t ..................... ok   
> t/api/lookup_uri.t ...................... ok   
> t/api/lookup_uri2.t ..................... ok   
> t/api/module.t .......................... ok       
> t/api/process.t ......................... ok   
> t/api/query.t ........................... ok   
> t/api/request_rec.t ..................... ok     
> t/api/request_subclass.t ................ ok   
> t/api/request_util.t .................... ok     
> t/api/response.t ........................ ok   
> t/api/rflush.t .......................... ok   
> t/api/sendfile.t ........................ ok   
> t/api/server_const.t .................... ok   
> t/api/server_rec.t ...................... ok     
> t/api/server_util.t ..................... ok     
> t/api/show.t ............................ ok   
> t/api/slurp_filename.t .................. ok   
> t/api/status.t .......................... ok   
> t/api/sub_request.t ..................... ok   
> t/api/uri.t ............................. ok     
> t/apr-ext/base64.t ...................... ok   
> t/apr-ext/brigade.t ..................... ok     
> t/apr-ext/bucket.t ...................... ok     
> t/apr-ext/date.t ........................ ok     
> t/apr-ext/error.t ....................... ok   
> t/apr-ext/finfo.t ....................... ok     
> t/apr-ext/os.t .......................... ok   
> t/apr-ext/pool.t ........................ ok     
> t/apr-ext/status.t ...................... ok   
> t/apr-ext/string.t ...................... ok   
> t/apr-ext/table.t ....................... ok     
> t/apr-ext/threadmutex.t ................. ok   
> t/apr-ext/threadrwlock.t ................ ok   
> t/apr-ext/uri.t ......................... ok     
> t/apr-ext/util.t ........................ ok   
> t/apr-ext/uuid.t ........................ ok   
> t/apr/base64.t .......................... ok   
> t/apr/brigade.t ......................... ok     
> t/apr/bucket.t .......................... ok     
> t/apr/constants.t ....................... ok   
> t/apr/date.t ............................ ok     
> t/apr/finfo.t ........................... ok     
> t/apr/flatten.t ......................... ok     
> t/apr/ipsubnet.t ........................ ok   
> t/apr/os.t .............................. ok   
> t/apr/perlio.t .......................... ok     
> t/apr/pool.t ............................ ok     
> t/apr/pool_lifetime.t ................... ok   
> t/apr/sockaddr.t ........................ ok   
> t/apr/socket.t .......................... ok   
> t/apr/status.t .......................... ok   
> t/apr/string.t .......................... ok   
> t/apr/table.t ........................... ok     
> t/apr/threadmutex.t ..................... ok   
> t/apr/threadrwlock.t .................... ok   
> t/apr/uri.t ............................. ok     
> t/apr/util.t ............................ ok   
> t/apr/uuid.t ............................ ok   
> t/compat/apache.t ....................... ok     
> t/compat/apache_file.t .................. ok     
> t/compat/apache_module.t ................ ok   
> t/compat/apache_table.t ................. ok   
> t/compat/apache_uri.t ................... ok     
> t/compat/apache_util.t .................. ok     
> t/compat/conn_authen.t .................. ok   
> t/compat/conn_rec.t ..................... ok   
> t/compat/request.t ...................... ok     
> t/compat/request_body.t ................. ok   
> t/compat/send_fd.t ...................... ok   
> t/directive/cmdparms.t .................. ok     
> t/directive/env.t ....................... ok   
> t/directive/perl.t ...................... ok   
> t/directive/perlcleanuphandler.t ........ ok   
> t/directive/perldo.t .................... ok     
> t/directive/perlloadmodule.t ............ ok   
> t/directive/perlloadmodule2.t ........... ok   
> t/directive/perlloadmodule3.t ........... ok   
> t/directive/perlloadmodule4.t ........... ok   
> t/directive/perlloadmodule5.t ........... ok   
> t/directive/perlloadmodule6.t ........... ok   
> t/directive/perlloadmodule7.t ........... ok   
> t/directive/perlmodule.t ................ ok   
> t/directive/perlrequire.t ............... ok   
> t/directive/pod.t ....................... ok   
> t/directive/setupenv.t .................. ok   
> t/error/api.t ........................... ok   
> t/error/runtime.t ....................... ok     
> t/error/syntax.t ........................ ok   
> t/filter/both_str_con_add.t ............. ok   
> t/filter/both_str_native_remove.t ....... skipped: cannot find module 'include'
> t/filter/both_str_req_add.t ............. ok   
> t/filter/both_str_req_mix.t ............. skipped: cannot find module 'include'
> t/filter/both_str_req_proxy.t ........... ok   
> t/filter/in_autoload.t .................. ok   
> t/filter/in_bbs_body.t .................. ok   
> t/filter/in_bbs_consume.t ............... ok   
> t/filter/in_bbs_inject_header.t ......... 1/? # Failed test 22 in t/filter/in_bbs_inject_header.t at line 58 fail #6
> # Failed test 26 in t/filter/in_bbs_inject_header.t at line 58 fail #7
> # Failed test 30 in t/filter/in_bbs_inject_header.t at line 58 fail #8
> t/filter/in_bbs_inject_header.t ......... Failed 3/36 subtests 
> t/filter/in_bbs_msg.t ................... ok   
> t/filter/in_bbs_underrun.t .............. ok   
> t/filter/in_error.t ..................... ok   
> t/filter/in_init_basic.t ................ ok   
> t/filter/in_str_bin_data.t .............. ok   
> t/filter/in_str_consume.t ............... ok   
> t/filter/in_str_declined.t .............. ok   
> t/filter/in_str_declined_read.t ......... ok   
> t/filter/in_str_lc.t .................... ok   
> t/filter/in_str_msg.t ................... ok   
> t/filter/in_str_sandwich.t .............. ok   
> t/filter/out_apache.t ................... skipped: cannot find module 'include'
> t/filter/out_bbs_basic.t ................ ok   
> t/filter/out_bbs_ctx.t .................. ok   
> t/filter/out_bbs_filebucket.t ........... ok     
> t/filter/out_init_basic.t ............... ok   
> t/filter/out_str_api.t .................. ok   
> t/filter/out_str_buffer.t ............... ok   
> t/filter/out_str_ctx.t .................. ok   
> t/filter/out_str_declined.t ............. ok   
> t/filter/out_str_eval.t ................. ok   
> t/filter/out_str_lc.t ................... ok   
> t/filter/out_str_remove.t ............... ok   
> t/filter/out_str_req_eos.t .............. skipped: cannot find module 'include'
> t/filter/out_str_req_mix.t .............. skipped: cannot find module 'include'
> t/filter/out_str_reverse.t .............. ok   
> t/filter/out_str_subreq_default.t ....... ok   
> t/filter/out_str_subreq_modperl.t ....... ok   
> t/filter/with_subrequest.t .............. ok   
> t/hooks/access.t ........................ ok   
> t/hooks/authen_basic.t .................. ok   
> t/hooks/authen_digest.t ................. skipped: cannot find module 'auth_digest'
> t/hooks/authz.t ......................... ok   
> t/hooks/cleanup.t ....................... ok   
> t/hooks/cleanup2.t ...................... ok   
> t/hooks/error.t ......................... ok   
> t/hooks/fixup.t ......................... ok   
> t/hooks/headerparser.t .................. ok   
> t/hooks/hookrun.t ....................... ok    
> t/hooks/init.t .......................... ok   
> t/hooks/inlined_handlers.t .............. ok   
> t/hooks/push_handlers.t ................. ok   
> t/hooks/push_handlers_anon.t ............ ok   
> t/hooks/push_handlers_blessed.t ......... ok   
> t/hooks/push_handlers_same_phase.t ...... ok   
> t/hooks/set_handlers.t .................. ok   
> t/hooks/stacked_handlers.t .............. ok   
> t/hooks/stacked_handlers2.t ............. ok   
> t/hooks/startup.t ....................... ok   
> t/hooks/trans.t ......................... ok   
> t/modperl/cookie.t ...................... ok   
> t/modperl/cookie2.t ..................... ok   
> t/modperl/current_callback.t ............ ok   
> t/modperl/dir_config.t .................. ok     
> t/modperl/endav.t ....................... ok   
> t/modperl/env.t ......................... ok       
> t/modperl/exit.t ........................ ok   
> t/modperl/getc.t ........................ ok   
> t/modperl/interpreter.t ................. ok   
> t/modperl/io_nested_with_closed_stds.t .. ok   
> t/modperl/io_with_closed_stds.t ......... ok   
> t/modperl/local_env.t ................... skipped: local %ENV is still broken
> t/modperl/merge.t ....................... ok    
> t/modperl/merge2.t ...................... ok    
> t/modperl/merge3.t ...................... ok    
> t/modperl/method.t ...................... ok   
> t/modperl/methodname.t .................. ok   
> t/modperl/methodobj.t ................... ok   
> t/modperl/perl.t ........................ ok   
> t/modperl/perl_options.t ................ ok    
> t/modperl/perl_options2.t ............... skipped: PerlOptions None is broken
> t/modperl/pnotes.t ...................... ok    
> t/modperl/pnotes2.t ..................... ok    
> t/modperl/post_utf8.t ................... ok   
> t/modperl/print.t ....................... ok   
> t/modperl/print_utf8.t .................. ok   
> t/modperl/print_utf8_2.t ................ ok   
> t/modperl/printf.t ...................... ok   
> t/modperl/readline.t .................... ok   
> t/modperl/request_rec_perlio_api.t ...... ok   
> t/modperl/request_rec_tie_api.t ......... skipped: perl 5.026002: PerlIO is used instead of TIEd IO
> t/modperl/setauth.t ..................... ok   
> t/modperl/setupenv.t .................... ok    
> t/modperl/setupenv2.t ................... ok     
> t/modperl/status.t ...................... ok     
> t/modperl/stdfd.t ....................... ok   
> t/modperl/stdfd2.t ...................... ok   
> t/modperl/subenv.t ...................... ok     
> t/modperl/taint.t ....................... ok   
> t/modperl/util.t ........................ ok   
> t/modules/apache_resource.t ............. ok   
> t/modules/apache_status.t ............... ok     
> t/modules/cgi.t ......................... ok   
> t/modules/cgi2.t ........................ ok   
> t/modules/cgipost.t ..................... ok   
> t/modules/cgipost2.t .................... ok   
> t/modules/cgiupload.t ................... ok   
> t/modules/cgiupload2.t .................. ok   
> t/modules/include.t ..................... skipped: cannot find module 'mod_include'
> t/modules/include2.t .................... skipped: cannot find module 'include'
> t/modules/include_subreq.t .............. skipped: cannot find module 'include'
> t/modules/proxy.t ....................... ok   
> t/perl/api.t ............................ ok   
> t/perl/hash_attack.t .................... skipped: relevant only for perl 5.8.2 and up to 5.17.6
> t/perl/signals.t ........................ ok   
> t/preconnection/note.t .................. ok   
> t/protocol/echo_bbs.t ................... ok   
> t/protocol/echo_bbs2.t .................. ok   
> t/protocol/echo_block.t ................. ok   
> t/protocol/echo_filter.t ................ ok   
> t/protocol/echo_nonblock.t .............. ok   
> t/protocol/echo_timeout.t ............... ok   
> t/protocol/pseudo_http.t ................ ok    
> t/user/rewrite.t ........................ ok   
> t/vhost/config.t ........................ ok   
> t/vhost/log.t ........................... ok   
> 
> Test Summary Report
> -------------------
> t/filter/in_bbs_inject_header.t       (Wstat: 0 Tests: 36 Failed: 3)
>   Failed tests:  22, 26, 30
> Files=245, Tests=4800, 250 wallclock secs ( 2.02 usr  1.46 sys + 167.39 cusr 57.16 csys = 228.03 CPU)
> Result: FAIL
> Failed 1/245 test programs. 3/4800 subtests failed.
> [warning] server localhost:8529 shutdown
> [  error] error running tests (please examine t/logs/error_log)
> +--------------------------------------------------------+
> | Please file a bug report: http://perl.apache.org/bugs/ |
> +--------------------------------------------------------+
> *** Error code 1
> 
> Stop.
> make[1]: stopped in /usr/ports/www/mod_perl2/work/mod_perl-2.0.10
> *** Error code 1 (ignored)





Cheers
Rumen Palov

On 2019-09-24 19:53, Steve Hay wrote:
> Please download, test, and report back on this mod_perl 2.0.11 release
> candidate.
> 
> https://dist.apache.org/repos/dist/dev/perl/mod_perl-2.0.11-rc2.tar.gz
> 
> MD5  = abc2c2168121a09b0fc3b6fc6adc00bd
> SHA1 = 36ee7626506a3a461118b3957814dfe9331ef1de
> 
> Changes since RC1 are as follows:
> 
> Fix [CVE-2011-2767] Arbitrary Perl code execution in the context of the user
> account via a user-owned .htaccess. Patch from bugs.debian.org #644169. [Jan
> Ingvoldstad <[email protected]>]
> 
> Fix potential test suite hangs due to pipelined response deadlocks. Patch
> from rt.cpan.org #82409. [Zefram <[email protected]>]
> 
> Fix t/compat/request.t failures [Steve Hay]
>