Debian Patches

Status for libyaml-syck-perl/1.36-2

Patch Description Author Forwarded Bugs Origin Last update
disable-compiler-check.patch Disable compiler check. This is not needed in a Debian build environment, and more importantly,
it breaks cross-builds.
gregor herrmann <gregoa@debian.org> not-needed debian vendor 2020-02-04
gcc15-fix.patch Try to fix builds with GCC 15.
I hereby put my changes under CC0 / MITL.
Shlomi Fish <shlomif@shlomifish.org> yes debian upstream https://github.com/cpan-authors/YAML-Syck/pull/64 2025-06-26
fix-address-all-4-C-layer-audit-findings-from-issue-.patch fix: address all 4 C-layer audit findings from issue #67
- HIGH: Fix heap buffer overflow in emitter tag buffer. The 512-byte
fixed allocation overflowed via strcat(tag, ref) with long class names.
Now tracks buffer size and grows dynamically with Renew() when needed.

- MEDIUM: Fix base64 decoder reading past buffer end on trailing
newlines. Added s < send guard to the inner whitespace-skip loop.

- MEDIUM: Replace strtok(id, "/:") with savepv copy + strtok at all 6
call sites in the parser handler. strtok mutated n->type_id in place,
corrupting shared node data. Each site now operates on a local copy
that is freed after use.

- LOW: Fix memory leak in syck_hdlr_add_anchor when a node already has
an anchor. The incoming anchor string 'a' was leaked on early return.

Closes #67
Toddr Bot <toddbot@rinaldo.us> no https://github.com/cpan-authors/YAML-Syck/commit/e8844a31c8cf0052914b198fc784ed4e6b8ae69e 2026-03-14

All known versions for source package 'libyaml-syck-perl'

Links