Your message dated Tue, 26 Oct 2021 18:00:15 +0000
with message-id <e1mfqkb-000j7u...@fasolo.debian.org>
and subject line Bug#996195: fixed in nodejs 16.11.1~dfsg-1
has caused the Debian Bug report #996195,
regarding nodejs FTCBFS: uses build architecture build tools such as gcc or
pkg-config
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
996195: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=996195
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: nodejs
Version: 12.22.5~dfsg-6
Tags: patch
User: debian-cr...@lists.debian.org
Usertags: ftcbfs
nodejs fails to cross build from source, because its configure.py
detects build architecture build tools such as gcc or pkg-config without
the relevant host architecture prefix. (Do note that I'm using the gnu
terminology also used in man dpkg-architecture here and that nodejs
seems to be using a confusing mix of terminology.) It seems that
configure.py expects that you export standard environment variables such
as CC or PKG_CONFIG. The attached patch implements that.
Unfortunately, it does not make nodejs cross buildable. A build then
fails running gen-regexp-special-case with an "Exec format error", which
typically means that the binary was compiled for the host architecture
but needed for the build architecture.
I researched this a bit and noticed that other cross distributions have
run into the same problem.
PtxDist:
https://lore.ptxdist.org/ptxdist/20200113101809.3260-1-b.es...@pengutronix.de/
buildroot:
https://github.com/buildroot/buildroot/blob/master/package/nodejs/nodejs.mk
In essence what they do is build nodejs twice. Once for the build
architecture. Then they steal the relevant tools from that build tree
and patch the build system to use those other tools. Likely Debian
should do the same (or upstream should gain a sane solution here). I
attempted doing this, but my native build for some reason didn't emit
gen-regexp-special-cases. At that point, I gave up on this.
While looking into this, I also noticed that you make the build
non-parallel when building for a 32bit architecture. Is the intention
really to make a cross build on amd64 for armhf non-parallel and leaving
a cross build from on say mips for riscv64 parallel? I guess that you do
mean the build architecture here.
Please consider applying the attached patch to fix the obvious. At that
point, please close the bug regardless of the other mentioned issues.
Helmut
diff --minimal -Nru nodejs-12.22.5~dfsg/debian/changelog
nodejs-12.22.5~dfsg/debian/changelog
--- nodejs-12.22.5~dfsg/debian/changelog 2021-10-10 10:48:05.000000000
+0200
+++ nodejs-12.22.5~dfsg/debian/changelog 2021-10-11 10:03:16.000000000
+0200
@@ -1,3 +1,10 @@
+nodejs (12.22.5~dfsg-6.1) UNRELEASED; urgency=medium
+
+ * Non-maintainer upload.
+ * Improve cross building: Use host tools. (Closes: #-1)
+
+ -- Helmut Grohne <hel...@subdivi.de> Mon, 11 Oct 2021 10:03:16 +0200
+
nodejs (12.22.5~dfsg-6) unstable; urgency=medium
* Team upload
diff --minimal -Nru nodejs-12.22.5~dfsg/debian/rules
nodejs-12.22.5~dfsg/debian/rules
--- nodejs-12.22.5~dfsg/debian/rules 2021-10-10 10:43:51.000000000 +0200
+++ nodejs-12.22.5~dfsg/debian/rules 2021-10-11 10:03:16.000000000 +0200
@@ -1,6 +1,8 @@
#!/usr/bin/make -f
+include /usr/share/dpkg/architecture.mk
include /usr/share/dpkg/pkg-info.mk
+include /usr/share/dpkg/buildtools.mk
export DEB_BUILD_MAINT_OPTIONS = hardening=+all,-pie
# source equivalent of nodejs -e 'console.log(process.versions.modules)'
@@ -199,7 +201,7 @@
find debian/nodejs-doc/usr/share/doc/nodejs-doc -name *.json -delete ||
true
override_dh_auto_configure:
- ./configure $(DEB_CONFIGURE_EXTRA_FLAGS)
+ CC=$(CC) CXX=$(CXX) PKG_CONFIG=$(PKG_CONFIG) ./configure
$(DEB_CONFIGURE_EXTRA_FLAGS)
override_dh_auto_build-arch:
mkdir -p $(NODE_TEST_DIR)
--- End Message ---
--- Begin Message ---
Source: nodejs
Source-Version: 16.11.1~dfsg-1
Done: Jérémy Lal <kapo...@melix.org>
We believe that the bug you reported is fixed in the latest version of
nodejs, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 996...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jérémy Lal <kapo...@melix.org> (supplier of updated nodejs package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 20 Oct 2021 02:27:37 +0200
Source: nodejs
Binary: libnode-dev libnode93 libnode93-dbgsym nodejs nodejs-dbgsym nodejs-doc
Architecture: source ppc64el all
Version: 16.11.1~dfsg-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Javascript Maintainers
<pkg-javascript-devel@alioth-lists.debian.net>
Changed-By: Jérémy Lal <kapo...@melix.org>
Description:
libnode-dev - evented I/O for V8 javascript (development files)
libnode93 - evented I/O for V8 javascript - runtime library
nodejs - evented I/O for V8 javascript - runtime executable
nodejs-doc - API documentation for Node.js, the javascript platform
Closes: 996195 996416
Changes:
nodejs (16.11.1~dfsg-1) experimental; urgency=medium
.
* New upstream version 16.11.1~dfsg
+ CVE-2021-22959: HTTP Request Smuggling due to spaced in headers (Medium)
+ CVE-2021-22960: HTTP Request Smuggling when parsing the body (Medium)
* Depends icu >= 68, c-ares >= 1.17.1
* Patch to stop using private cares header
* Drop ppc64 patch, hopefully fixed now
* Refresh trivial patches
* Replace tools/doc patch by copy in debian/doc-generator
* source overrides: update expressions
* copyright:
+ highlight.pack.js no longer in tarball
+ update deps/cares paths
.
[ Bastien Roucariès ]
* Bug fix: "nodejs FTCBFS: uses build architecture build tools such as
gcc or pkg-config", thanks to Helmut Grohne (Closes: #996195).
* Document gyp target/host in debian/rules
.
[ Helmut Grohne ]
* Add native build dependencies for cross compiling. (Closes: #996416)
Checksums-Sha1:
b2cc89ab1826f78c9fafe13205293820cc192674 3693 nodejs_16.11.1~dfsg-1.dsc
936f83f7fac414cc3c2aae1f0834555f5f2842e6 232092
nodejs_16.11.1~dfsg.orig-types-node.tar.xz
87c3ce14ed548b0c377cab5cdaaad904f70fb23a 21250900
nodejs_16.11.1~dfsg.orig.tar.xz
013b05a8030519c7247ee85c5587ae92314a7778 150500
nodejs_16.11.1~dfsg-1.debian.tar.xz
bbcb262b0429903bab1ded10ae96dba5db901a30 457420
libnode-dev_16.11.1~dfsg-1_ppc64el.deb
bb162422d439898fa5978274cf178d11a84ec7fe 808627824
libnode93-dbgsym_16.11.1~dfsg-1_ppc64el.deb
e2b6b8bf4b1075760cf376dcab82cdb3e55f887d 10129716
libnode93_16.11.1~dfsg-1_ppc64el.deb
22355ad767ba35e1f0e906cfaa76084c1824d65c 143024
nodejs-dbgsym_16.11.1~dfsg-1_ppc64el.deb
3c225a0864e15222fc72a57c4a3a9b79e4621923 2148160
nodejs-doc_16.11.1~dfsg-1_all.deb
88908d9e5d12322a256476f8348f7b68190c5f3f 10346
nodejs_16.11.1~dfsg-1_ppc64el.buildinfo
b8c60fbbee7d2cb037123577ddb57311b3c73379 293968
nodejs_16.11.1~dfsg-1_ppc64el.deb
Checksums-Sha256:
4536d8e318d09eb54a39e93ff9a60c47651e21b0a6e2361f333007042d4371cb 3693
nodejs_16.11.1~dfsg-1.dsc
b99c762ebe614d0644714b9f152de802610aae87569b781d521df720d705d8c4 232092
nodejs_16.11.1~dfsg.orig-types-node.tar.xz
99f2fa424781a592dda50d1df7caa05d3558fc7024d36970d872c2290791f6d3 21250900
nodejs_16.11.1~dfsg.orig.tar.xz
008218f60c2ad26b2e4a2a95479f843ef235f952ac0fd7631653342c1d56bdf0 150500
nodejs_16.11.1~dfsg-1.debian.tar.xz
c1ebcca5a8096390cce896687513e2128b6a9d046e4e3b514f45d10a3ae41f3e 457420
libnode-dev_16.11.1~dfsg-1_ppc64el.deb
45dc8df2f6fb4da977510dd6de7d8f46edfbb37c93bcc231e742e544963c7140 808627824
libnode93-dbgsym_16.11.1~dfsg-1_ppc64el.deb
d1c455f3e92c6317ae3267877900d2f53981570fdd7b28c6c596db0c383c0c66 10129716
libnode93_16.11.1~dfsg-1_ppc64el.deb
1965b167d914ed23cc18a56c9ab19f6bae5efe767684598ef193cbc1e936ede4 143024
nodejs-dbgsym_16.11.1~dfsg-1_ppc64el.deb
d73980829ca82fd33b1237e6a9a87bd1dec77ae915b588fea19b2715dd603339 2148160
nodejs-doc_16.11.1~dfsg-1_all.deb
a255ca319b23b92396b1c6bcb7e2f979e500443f46899a2e3c1f22eb5a572fc7 10346
nodejs_16.11.1~dfsg-1_ppc64el.buildinfo
d9dc502a0ab21a96a0e6b2d32f70b56b7a5c8a1822f63ba6f381c16d70635449 293968
nodejs_16.11.1~dfsg-1_ppc64el.deb
Files:
d265b3ca1b647199427e59f74085d27a 3693 javascript optional
nodejs_16.11.1~dfsg-1.dsc
febe56ec6a5d065f20cd2dc291aa3882 232092 javascript optional
nodejs_16.11.1~dfsg.orig-types-node.tar.xz
eec340c0c37bd84d1c1af7be40d7ee2a 21250900 javascript optional
nodejs_16.11.1~dfsg.orig.tar.xz
ee0fbab30620b055a4092bf8a16e0380 150500 javascript optional
nodejs_16.11.1~dfsg-1.debian.tar.xz
7bf4d68e17fb1dd3568810615d015db2 457420 libdevel optional
libnode-dev_16.11.1~dfsg-1_ppc64el.deb
3a8e941bb9393bbc885fc293f53a2681 808627824 debug optional
libnode93-dbgsym_16.11.1~dfsg-1_ppc64el.deb
d0147a7c65b29b0176202cbda3bad408 10129716 libs optional
libnode93_16.11.1~dfsg-1_ppc64el.deb
340111bb7d5e5c3353f5e0017e97838c 143024 debug optional
nodejs-dbgsym_16.11.1~dfsg-1_ppc64el.deb
c85740a966c02b897f523abf58c9e740 2148160 doc optional
nodejs-doc_16.11.1~dfsg-1_all.deb
ed7244ef290b298fce513cec22072822 10346 javascript optional
nodejs_16.11.1~dfsg-1_ppc64el.buildinfo
bc3ed7042d0cde439afe23a5963d0ed5 293968 javascript optional
nodejs_16.11.1~dfsg-1_ppc64el.deb
-----BEGIN PGP SIGNATURE-----
iQJGBAEBCgAwFiEEA8Tnq7iA9SQwbkgVZhHAXt0583QFAmFwItQSHGthcG91ZXJA
bWVsaXgub3JnAAoJEGYRwF7dOfN0fw0QAIZvg4d7aQRnTQCNdFo9ZULAq2SkP7ve
LsSLcbjvHJEnwTvY9utXAw8TePCzmYB9gGZ4C05xmQVVCs69n4uQLyxy18CzLqab
sH6hG2L5foxpjKv//bzARtcpc213+7RDb0qKmgGFX16J1TWy6ypKB9iq/XVeUrsr
8c6scUMOVOURzz4oiKTfFIHEwxV4PwdZNKKHsTquPUQKk0AwUePOYc1OtXm2QU4G
8SmXVk5B92qDATJAU5qu9nRO7XDS7fz8Chsk8ss6keO3XdpS8aklUJlGI4ap052/
zTdj/oXzSr07Z8RdoGCs+O9RxPcnRuoaDtgnAiedp3ePfRCcG9G7fJIOFzT4ypE5
TSKCNojum01ZltmtKNhVy67JN3/viSibp8zyhOJrIRtgU2eF0cHoTPV+Y3agl6NB
b9/nZtKgz24Go34WO+fLuB+JgvYEcWAXxGwqiwoJDpqI04t+lQDHgZ0wvLINm3+E
nq6BPQvintXqeS7mgXYrLBz4r/D1Q7BzjHAOaDtKgP6KKyfEaCwUjE0Jy/1F/+ge
vCByexMlhP4Ur9j7EkUmL+qiAH+dU2a/QFiVT0K/S4xnoO92U0BzB0Er13CRxlFk
SgOFxls9hsO+fbYWhb30Z+rbbLckGHKnenxT+6LbPTn5pMo/iyeBwMd/EpMVaWFJ
OIIhpCfiSVxg
=EjlH
-----END PGP SIGNATURE-----
--- End Message ---
--
Pkg-javascript-devel mailing list
Pkg-javascript-devel@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel