Merge pull request #41 from timlegge/RT166901

Fixes RT#166901: Suspicious fail on signature file with an unexpected empty line

Author: timlegge

Changes

@@ -1,3 +1,7 @@
+[Changes for 0.90 - Wed Jun 11 21:51:22 ADT 2025]
+
+* Fixes RT#166901: Suspicious fail on signature file with an unexpected empty line
+
 [Changes for 0.89 - Fri Sep 13 21:56:06 ADT 2024] 
 
 * Replace keyserver with keyserver.ubuntu.com (haarg)

META.yml

@@ -26,4 +26,4 @@ requires:
   perl: '5.005'
 resources:
   repository: http://github.com/audreyt/module-signature
-version: '0.89'
+version: '0.90'

SIGNATURE

@@ -1,5 +1,5 @@
 This file contains message digests of all files listed in MANIFEST,
-signed via the Module::Signature module, version 0.88.
+signed via the Module::Signature module, version 0.89.
 
 To verify the content in this distribution, first make sure you have
 Module::Signature installed, then type:
@@ -20,7 +20,7 @@ SHA256 3b6ee84c36f61397e9aa6389836e3535eb8aa56bdc80029a90cbac347937c17d AUTHORS
 SHA256 6ed0d92fb171ce37b402f6753caa8e4f50f58f66b106c33f88103fc12976c0ed Changes
 SHA256 39124780bcba2341f2094d39f1555ab684a7bebefb8185fe1138defce961bec5 MANIFEST
 SHA256 093c47e35166ca8f4d6cb4a1d51b436809a4fca4bdb43221bd8fb67adac2e425 MANIFEST.SKIP
-SHA256 b855fde125d0fe54c8e5c2bdc9da2f192a0f53ec5a62662abf0bcde627a1ba6a META.yml
+SHA256 5938455ffee85306532d800d331454e2ff259136cb109c3505fce2a91d67d06c META.yml
 SHA256 333ec192d791db2ee22c59c7beb41442a3edb9ad4d46b5736553ad7d407ec3e9 Makefile.PL
 SHA256 c9b4cc9f924857b93a081066bdc7f120e537469c1b605e19c1f07296ac07cfdd NIKLASHOLM2018.pub
 SHA256 57fe88a2c9a3498776dc12a9ae6bc4151028c84d3a48de6b0addf6c32e9dbb90 PAUSE2022.pub
@@ -36,7 +36,7 @@ SHA256 6eaa52282b49bbb2fc54b137be6ce4f9eda80619a0c14571f4718a37a8aba065 inc/Modu
 SHA256 a10f0f4ebb579bae28ec5a372c5b7bcdc07df89aa24c04b502e0d0442230f200 inc/Module/Install/Scripts.pm
 SHA256 9cf3940ab15fd196c7b147aea3ab3c18d9ec3fdb3eadb238dc50120185cf81e7 inc/Module/Install/Win32.pm
 SHA256 c6cee30b2053ca28654b3216340169ca97ff2b2bcbb5a1ef7e3b7e3cf593419b inc/Module/Install/WriteAll.pm
-SHA256 b0da6bd1227019c273e2f81f155e62fd18e0dac1d14181d6cbf00028a8466d38 lib/Module/Signature.pm
+SHA256 f1706da061a8ff9409a931f487acf13e7bde10d3d5f11c620dd050443a21ead6 lib/Module/Signature.pm
 SHA256 51aa9c445c6f54c26fc37d5ec2e42535461eb3a78911ca2516dd1c97e7aa7185 script/cpansign
 SHA256 c3780d88e3137ebbdd849d22f4a45c25e0fe24a74d4d2e041fae8788deb4dc89 t/0-signature.t
 SHA256 9be1e82eed0cb08514d2e3654b1396a23e5dd89ca8a5e67788ac6492697a5ce3 t/1-basic.t
@@ -46,17 +46,17 @@ SHA256 2b17f99fccb7172b580ecde8839860f5db05292ea25391d9ea60839b45d5ac9a t/wrap.p
 SHA256 1e55d31ce050bd8250d7f5e74afdbb050fdf34834e0925f6992400e6a35ee87a t/wrapped-tests.bin
 -----BEGIN PGP SIGNATURE-----
 
-iQIzBAEBAwAdFiEEMguXHBCUSzAt6mNu1fh7LgYGpfkFAmbk39kACgkQ1fh7LgYG
-pflfqw//VBqgim2LE1FftFmU2jtgFXFGkqxAZadd+QN+3Y4PwiU8N9F7HxT7KSd6
-otd3d85/4AkwPp8qOnMSSMEW2wRbiqyqyRDobf1TTPZueSjFbwKpGxOXakEWZ6EN
-6VUyh27SM4ZIhvAGn0rN2R/pRhH4vIOg3EF4GUGeuK/m9qXBZzW2dOnsR40EoRqL
-Vl576ja4vGwrteeDGDCGPiM+lyxkY3Ja8I1ASviS7HHOyN+xIQnQ1qpxoX2jlo5O
-oWBTt+26FNe7L+gp5v2jzuZoihPu3I+UVW/BzDMBwq8hn9/0S6d0HXJ1gZ2Sd11L
-YI6mohvPXENtP70urtouQ30ajHHEka8PgDMz+HpnCrS08TXnDsybd9fUf6gXChpo
-IE851cTTD0gNSu3ANzMdvgwl8xJu+r/CuVOVKqpeDyA1jWajd43XODZHe/z92z5y
-ZgOKXEw+ohiBay6MYOcmjQIsMS+xfbmv411EgeSqO0U5VfTRphMfwUG+zutdo1eS
-o5stxGxENTkYEW0BT6zXwDd5Xcz8G6HLmOszEqLE8eRlTmoWWR1rgNDeoTIX2my3
-2faStDFiB8lpOOAvFrbpqg+Qpo2yr/WZT2XAR1EBna1PabzpkYV3nWC4GyalM2ID
-9fqQNax3eerWw+Oj4gZf1J6VTjnea1ymUao9BQ+n1NbFb+mng40=
-=eVeg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+=DVlN
 -----END PGP SIGNATURE-----

lib/Module/Signature.pm

@@ -1,5 +1,5 @@
 package Module::Signature;
-$Module::Signature::VERSION = '0.89';
+$Module::Signature::VERSION = '0.90';
 
 use 5.005;
 use strict;
@@ -62,6 +62,7 @@ sub _cipher_map {
     for my $line (@lines) {
         last if $line eq '-----BEGIN PGP SIGNATURE-----';
         next if $line =~ /^---/ .. $line eq '';
+        next if $line eq '';
         my($cipher,$digest,$file) = split " ", $line, 3;
         return unless defined $file;
         $map{$file} = [$cipher, $digest];