Had the same problem on CentOS 4.8 with Perl 5.12.0
Upgrading expat on my system fixes this problem (or at least allows the
tests to pass).
I noticed that the version of expat on my system was 1.95.7 -- the
version that worked for me was 2.0.1 (downloaded from SourceForge,
http://sourceforge.net/projects/expat).
The README file for XML::Parser seems to be quite old (version 2.31 is
indicated at the top of the file, which is from April 2002). If
XML::Parser is relying on Expat functionality which is only present (or
perhaps simply non-buggy) in versions >= 2.x, the README should be
updated to reflect this at a minimum; the best solution would be to put
a check against the expat version header for a compatible version.
Mon Apr 19 18:30:25 2010The RT System itself - Status changed from 'new' to 'open'
Sat May 28 15:11:18 2011TODDR [...] cpan.org - Subject changed from 'XML-Parser will not install on Fedora Core 12' to 'XML-Parser fails with expat CVE fix?'
Sat May 28 15:11:19 2011TODDR [...] cpan.org - Given to TODDR
Sat May 28 15:11:19 2011TODDR [...] cpan.org - Severity Important added
Sat May 28 15:11:19 2011TODDR [...] cpan.org - Broken in 2.40_01 added
Sat May 28 15:11:40 2011TODDR [...] cpan.org - Correspondence added
The relevant failure seems to be this
t/parament.t ...... 1/12
error in processing external entity reference at line 8, column 0, byte 173:
<!ENTITY more SYSTEM "t/ext2.ent">
]
Show quoted text
>
^
<foo>Happy, happy
<bar>&joy;, &joy;</bar>
at /root/.cpan/build/XML-Parser-2.36-uOIHKZ/blib/lib/XML/Parser.pm line 187
t/parament.t ...... Dubious, test returned 255 (wstat 65280, 0xff00)
Failed 11/12 subtests
Sat May 28 15:12:01 2011TODDR [...] cpan.org - Correspondence added
Sat May 28 16:06:52 2011TODDR [...] cpan.org - Correspondence added
RT-Send-CC:
tskrainar [...] gmail.com
This may be an old issue which I'm re-using but my recent dev release of XML::Parser is showing
as broken across the board for Free BSD. This ticket is a blocker for releasing 2.41
Sat May 28 16:07:29 2011TODDR [...] cpan.org - Correspondence added
Tue May 31 13:10:17 2011TODDR [...] cpan.org - Correspondence added
RT-Send-CC:
tskrainar [...] gmail.com
It appears that the bug is in expat it's self.
This is the original patch:
free82x64# \less files/patch-xmlparse.c
--- lib/xmlparse.c.orig 2009-12-08 10:20:08.866482591 +0900
+++ lib/xmlparse.c 2009-12-08 10:20:23.038667874 +0900
@@ -3725,7 +3725,6 @@
return XML_ERROR_NO_ELEMENTS;
default:
tok = -tok;
- next = end;
break;
}
}
Per Debian's bug tracker, this CVE fix caused a break Which they fixed with this patch:
http://patch-tracker.debian.org/patch/series/view/expat/2.0.1-
4+lenny3/560901_CVE_2009_3560
--- trunk~/lib/xmlparse.c 2007-05-08 04:25:35.000000000 +0200
+++ trunk/lib/xmlparse.c 2009-12-29 21:57:22.141732904 +0100
@@ -3703,6 +3703,9 @@
return XML_ERROR_UNCLOSED_TOKEN;
case XML_TOK_PARTIAL_CHAR:
return XML_ERROR_PARTIAL_CHAR;
+ case -XML_TOK_PROLOG_S:
+ tok = -tok;
+ break;
case XML_TOK_NONE:
#ifdef XML_DTD
/* for internal PE NOT referenced between declarations */
I haven't searched yet but I believe RedHat came to the same conclusion. I'm unclear why
upstream hasn't fixed it but this is not a XML::Parser issue.
Tue May 31 13:33:34 2011TODDR [...] cpan.org - Subject changed from 'XML-Parser fails with expat CVE fix?' to 'XML-Parser fails with expat CVE-2009-3560 fix.'
Tue May 31 13:50:31 2011TODDR [...] cpan.org - Correspondence added
I've reported the problem to Free BSD. I plan to TODO these tests until they fix it.
Tue May 31 13:51:18 2011TODDR [...] cpan.org - Correspondence added
On Tue May 31 13:50:31 2011, TODDR wrote:
Show quoted text
> I've reported the problem to Free BSD. I plan to TODO these tests
> until they fix it.
Wed Jun 01 20:45:45 2011TODDR [...] cpan.org - Subject changed from 'XML-Parser fails with expat CVE-2009-3560 fix.' to 'XML-Parser fails with FreeBSD expat CVE-2009-3560 fix.'
Tue Aug 30 12:07:03 2011TODDR [...] cpan.org - Correspondence added
RT-Send-CC:
tskrainar [...] gmail.com
On Tue May 31 13:51:18 2011, TODDR wrote:
Show quoted text
> On Tue May 31 13:50:31 2011, TODDR wrote:
> > I've reported the problem to Free BSD. I plan to TODO these tests
> > until they fix it.
RT for rt.cpan.org