On 02/10/2014 01:32 PM, Bastian Blank wrote:
> I see this problem clearly in the shipped binaries:
>
> | public class com.google.inject.internal.asm.$ClassWriter extends
> com.google.inject.internal.asm.$ClassVisitor {
> | public final void visit(int, int, java.lang.String, java.lang.String,
> java.lang.String, java.lang.String[]);
> | }
>
> However this definition is _not_ in the current sources, so we have no
> source for this binary package in the repository.Strictly speaking, it's not true to say that we don't have the source for this binary package in the repository. The ClassVisitor.class file that jarjar pulled in from libasm[34]-java is built from sources in the archive. See the ClassVisitor.java class in those packages. I'm not trying to downplay the issue, it's a serious problem - both the runtime issue and the jarjar bundling issue - only pointing out that we do have sources for this class in the Debian archive. Cheers, tony
signature.asc
Description: OpenPGP digital signature
