| Package home | Report new bug | New search | Development Roadmap | Status: Open | Feedback | All | Closed Since Version 1.10.16 |
| Bug #10938 | Invalid package.xml creates wrong package | ||
|---|---|---|---|
| Submitted: | 2007-05-05 19:23 UTC | ||
| From: | cipri | Assigned: | cellog |
| Status: | Closed | Package: | PEAR (version 1.5.3) |
| PHP Version: | 5.2.0 | OS: | Fedora Core 6 |
| Roadmaps: | 1.6.0 | ||
[2007-05-05 19:23 UTC] cipri
(Cipriano Groenendal)
Description:
------------
A malformed package.xml can create an invalid package that is not installable
Test script:
---------------
1) put your package.xml in a subfolder, relative to the files.
2) Add the following filelist:
<dir name="/">
<file baseinstalldir="Foo" name="../bar.php" role="php" />
</dir>
3) pear package
4) pear install <package>
Expected result:
----------------
pear package should refuse to create the package, or handle it better and create a valid tgz
Actual result:
--------------
PEAR refuses to install the package.
Comments
[2007-05-10 00:00 UTC] cellog
(Greg Beaver)
This bug has been fixed in CVS.
If this was a documentation problem, the fix will appear on pear.php.net by the end of next Sunday (CET).
If this was a problem with the pear.php.net website, the change should be live shortly.
Otherwise, the fix will appear in the package's next release.
Thank you for the report and for helping us make PEAR better.