Bug#1010241: libdebian-source-perl: Incorrect case sensitivity in Debian::Control::Stanza::new for field names

[Ben Finney]

Package: libdebian-source-perl
Version: 0.116
Severity: normal

When parsing a Debian control stanza to an internal data structure,
Debhelper uses ‘Debian::Control::Stanza’. The ‘new’ function attempts
to match each field name to those names known for Debian control file
stanzas.

The matching is incorrectly case-sensitive. It should accept valid
variations such as ‘VCS-Git’ and ‘VCS-Browser’, but instead it
crashes:

    Invalid field given (VCS_Git) at /usr/share/perl5/Debian/Control.pm line 122.

The matching should be case-insensitive, understanding ‘vcs-git’ and
‘VCS-Git’ and ‘Vcs-Git’ and ‘vcs-Git’ to all be the same field name.


-- System Information:
Debian Release: bookworm/sid
  APT prefers stable-security
  APT policy: (500, 'stable-security'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.17.0-1-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_AU.UTF-8), LANGUAGE=en_AU.UTF-8
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libdebian-source-perl depends on:
ii  dpkg                      1.21.7
ii  dpkg-dev                  1.21.7
ii  libapt-pkg-perl           0.1.40+b1
ii  libarray-unique-perl      0.08-2.1
ii  libclass-accessor-perl    0.51-1
ii  liblist-moreutils-perl    0.430-2
ii  libparse-debcontrol-perl  2.005-4.1
ii  libsub-install-perl       0.928-1.1
ii  libtie-ixhash-perl        1.23-2.1
ii  libwww-mechanize-perl     2.06-1
ii  libwww-perl               6.62-1
ii  perl                      5.34.0-4

libdebian-source-perl recommends no packages.

libdebian-source-perl suggests no packages.

-- no debconf information

-- 
 \       “He was the mildest-mannered man / That ever scuttled ship or |
  `\       cut a throat.” —“Lord” George Gordon Noel Byron, _Don Juan_ |
_o__)                                                                  |
Ben Finney <bignose at debian.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20220427/e44c02e6/attachment.sig>