Bug#901270: trickle FTCBFS: configures for the build architecture
Hi Helmut, Helmut Grohne wrote: > trickle fails to cross build from source, because it configures for the > build architecture. The easiest way of fixing that is using > dh_auto_configure. After doing so trickle continues to fail due to its > use of AC_TRY_RUN. I have no fix for that to offer. Please consider > fixing the --host part anyway. The attached patch implements that. > Please close this bug when trickle passes --host to ./configure. That > will make the next failure more visible to interested cross builders. I did a QA upload of trickle last night rewriting most of debian/rules to use the dh sequencer and dh compat level 13. (So your patch no more applies.) I see no --host in my build log, but it now (obviously) uses dh_auto_configure. It would be nice if you could check if this cross-build issue still exists with trickle 1.07-11. If that's the case, I'll happily close your bug report and add an according bug report reference retroactively to the changelog entry in git. Regards, Axel -- ,''`. | Axel Beckert , https://people.debian.org/~abe/ : :' : | Debian Developer, ftp.ch.debian.org Admin `. `' | 4096R: 2517 B724 C5F6 CA99 5329 6E61 2FF9 CD59 6126 16B5 `-| 1024D: F067 EA27 26B9 C3FC 1486 202E C09E 1D89 9593 0EDE
Bug#901270: marked as done (trickle FTCBFS: configures for the build architecture)
Your message dated Tue, 21 Sep 2021 19:52:03 +0200 with message-id and subject line Re: Bug#901270: trickle FTCBFS: configures for the build architecture has caused the Debian Bug report #901270, regarding trickle FTCBFS: configures for the build architecture to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 901270: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901270 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems --- Begin Message --- Source: trickle Version: 1.07-10.1 Tags: patch User: helm...@debian.org Usertags: rebootstrap trickle fails to cross build from source, because it configures for the build architecture. The easiest way of fixing that is using dh_auto_configure. After doing so trickle continues to fail due to its use of AC_TRY_RUN. I have no fix for that to offer. Please consider fixing the --host part anyway. The attached patch implements that. Please close this bug when trickle passes --host to ./configure. That will make the next failure more visible to interested cross builders. Helmut diff -u trickle-1.07/debian/changelog trickle-1.07/debian/changelog --- trickle-1.07/debian/changelog +++ trickle-1.07/debian/changelog @@ -1,3 +1,10 @@ +trickle (1.07-10.2) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Address FTCBFS: Let dh_auto_configure pass --host to ./configure. (Closes: #-1) + + -- Helmut Grohne Sun, 10 Jun 2018 20:57:14 +0200 + trickle (1.07-10.1) unstable; urgency=medium * Non-maintainer upload. diff -u trickle-1.07/debian/rules trickle-1.07/debian/rules --- trickle-1.07/debian/rules +++ trickle-1.07/debian/rules @@ -9,8 +9,7 @@ dh_testdir dh_autoreconf CPPFLAGS="$(CPPFLAGS)" CFLAGS="$(CFLAGS)" CXXFLAGS="$(CXXFLAGS)" \ -LDFLAGS="$(LDFLAGS)" ./configure --prefix=/usr \ ---mandir=/usr/share/man --sysconfdir=/etc --with-pic +LDFLAGS="$(LDFLAGS)" dh_auto_configure -- --with-pic build: build-arch build-indep build-arch: build-stamp --- End Message --- --- Begin Message --- Version: 1.07-11 Hi Axel, On Tue, Sep 21, 2021 at 03:49:30PM +0200, Axel Beckert wrote: > I did a QA upload of trickle last night rewriting most of debian/rules > to use the dh sequencer and dh compat level 13. (So your patch no more > applies.) Thank you. > I see no --host in my build log, but it now (obviously) uses > dh_auto_configure. --host is only passed for cross builds by dh_auto_configure. > It would be nice if you could check if this cross-build issue still > exists with trickle 1.07-11. If that's the case, I'll happily close > your bug report and add an according bug report reference > retroactively to the changelog entry in git. Next time, please do yourself and myself a favour and just close the bug. If you did a reasonable stab at fixing the problem (and using dh_auto_configure is such a thing), please just close ftcbfs bugs (in general) right away without confirming. Packages are automatically retested on uploads. If it continues to fail, I'll see it anyway, but if it doesn't you save me from looking into it again. And if you want to go the extra mile and check, then go http://crossqa.debian.net/src/trickle (this is also linked from tracker.d.o as "cross"). If it hasn't built your version yet (which it usually does within three days), you may click the "cross build" button at the bottom and it should do it within an hour. And there you see your build and it does pass --host. It fails on the AC_TRY_RUN mentioned in my submission. I still don't have a fix for that. You'd also save yourself from reading a long reply from me. :) Helmut--- End Message ---
Bug#901270: trickle FTCBFS: configures for the build architecture
Hi Helmut, Helmut Grohne wrote: > > I see no --host in my build log, but it now (obviously) uses > > dh_auto_configure. > > --host is only passed for cross builds by dh_auto_configure. Ah, thanks for that explanation! > Next time, please do yourself and myself a favour and just close the > bug. I'd have done if that missing --host wouldn't have confused me. > If you did a reasonable stab at fixing the problem (and using > dh_auto_configure is such a thing), please just close ftcbfs bugs (in > general) right away without confirming. Will do. > Packages are automatically retested on uploads. Ah, nice. > And if you want to go the extra mile and check, then go > http://crossqa.debian.net/src/trickle (this is also linked from > tracker.d.o as "cross"). Nice! Didn't notice that so far. Will do next time! > If it hasn't built your version yet (which it > usually does within three days), you may click the "cross build" button > at the bottom and it should do it within an hour. Cool service, thanks! And thanks for making me personally aware of it! :-) > And there you see your build and it does pass --host. It fails on > the AC_TRY_RUN mentioned in my submission. Ah, I understood that as if that was a general issue since the package also had a FTBFS issue also related to autoconf. I also assumed that this would be fixed by my debian/rules rewrite as well. > I still don't have a fix for that. I assume you still consider this bug report as fixed anyway since you closed it. > You'd also save yourself from reading a long reply from me. :) I love long mails. Especially if they're full of helpful information. :-) Regards, Axel -- ,''`. | Axel Beckert , https://people.debian.org/~abe/ : :' : | Debian Developer, ftp.ch.debian.org Admin `. `' | 4096R: 2517 B724 C5F6 CA99 5329 6E61 2FF9 CD59 6126 16B5 `-| 1024D: F067 EA27 26B9 C3FC 1486 202E C09E 1D89 9593 0EDE
Bug#978372: marked as done (ap-utils: FTBFS: configure:5103: error: possibly undefined macro: AM_INTL_SUBDIR (caused by gettext 0.19 -> 0.21?))
Your message dated Tue, 21 Sep 2021 23:48:30 + with message-id and subject line Bug#978372: fixed in ap-utils 1.5-5 has caused the Debian Bug report #978372, regarding ap-utils: FTBFS: configure:5103: error: possibly undefined macro: AM_INTL_SUBDIR (caused by gettext 0.19 -> 0.21?) to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 978372: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=978372 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems --- Begin Message --- Source: ap-utils Version: 1.5-4 Severity: serious Justification: FTBFS on amd64 Tags: bullseye sid ftbfs Usertags: ftbfs-20201226 ftbfs-bullseye Hi, During a rebuild of all packages in sid, your package failed to build on amd64. Relevant part (hopefully): > debian/rules build > dh build >dh_update_autotools_config >dh_autoreconf > aclocal: warning: autoconf input should be named 'configure.ac', not > 'configure.in' > ERROR: Use of AM_GNU_GETTEXT without [external] argument is no longer > supported. > configure.in:56: warning: AM_INTL_SUBDIR is m4_require'd but not m4_defun'd > /usr/share/aclocal/gettext.m4:55: AM_GNU_GETTEXT is expanded from... > configure.in:56: the top level > ERROR: Use of AM_GNU_GETTEXT without [external] argument is no longer > supported. > configure.in:56: warning: AM_INTL_SUBDIR is m4_require'd but not m4_defun'd > aclocal.m4:77: AM_GNU_GETTEXT is expanded from... > configure.in:56: the top level > autoreconf: configure.in: AM_GNU_GETTEXT is used, but not > AM_GNU_GETTEXT_VERSION > ERROR: Use of AM_GNU_GETTEXT without [external] argument is no longer > supported. > configure.in:56: warning: AM_INTL_SUBDIR is m4_require'd but not m4_defun'd > aclocal.m4:77: AM_GNU_GETTEXT is expanded from... > configure.in:56: the top level > configure:5103: error: possibly undefined macro: AM_INTL_SUBDIR > If this token and others are legitimate, please use m4_pattern_allow. > See the Autoconf documentation. > autoreconf: /usr/bin/autoconf failed with exit status: 1 > dh_autoreconf: error: autoreconf -f -i returned exit code 1 > make: *** [debian/rules:18: build] Error 25 The full build log is available from: http://qa-logs.debian.net/2020/12/26/ap-utils_1.5-4_unstable.log A list of current common problems and possible solutions is available at http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute! If you reassign this bug to another package, please marking it as 'affects'-ing this package. See https://www.debian.org/Bugs/server-control#affects If you fail to reproduce this, please provide a build log and diff it with me so that we can identify if something relevant changed in the meantime. About the archive rebuild: The rebuild was done on EC2 VM instances from Amazon Web Services, using a clean, minimal and up-to-date chroot. Every failed build was retried once to eliminate random failures. --- End Message --- --- Begin Message --- Source: ap-utils Source-Version: 1.5-5 Done: Boyuan Yang We believe that the bug you reported is fixed in the latest version of ap-utils, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 978...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Boyuan Yang (supplier of updated ap-utils package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 21 Sep 2021 19:23:58 -0400 Source: ap-utils Architecture: source Version: 1.5-5 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Boyuan Yang Closes: 978372 Changes: ap-utils (1.5-5) unstable; urgency=medium . * QA upload. * debian/control: + Bump debhelper compat to v13. * debian/rules: Use dh13 syntax. * debian/README.source: Dropped, useless. . [ Lukas Märdian ] * Adopt autotools for required 'external' parameter of AM_GNU_GETTEXT (Closes: #978372) Checksums-Sha1: c78d534b1d0ab2a56ee82097790d2dcb413ea6dc 1823 ap-utils_1.5-5.dsc 7f3220638a9a60d93f4b6b4ce0956ee94edfda3a 551875 ap-utils_1.5.orig.tar.gz dce6aa02b9d8a4299eae9a46f0494aeb9eb7252b 6536 ap-utils_1.5-5.debian.tar.xz d5353a71e3a1e18b090085d70f6d4235d6eb70a5 6031 ap-utils_1.5-5_amd64.buildinfo Checksums-
Processing of ap-utils_1.5-5_source.changes
ap-utils_1.5-5_source.changes uploaded successfully to localhost along with the files: ap-utils_1.5-5.dsc ap-utils_1.5.orig.tar.gz ap-utils_1.5-5.debian.tar.xz ap-utils_1.5-5_amd64.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)
ap-utils_1.5-5_source.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 21 Sep 2021 19:23:58 -0400 Source: ap-utils Architecture: source Version: 1.5-5 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Boyuan Yang Closes: 978372 Changes: ap-utils (1.5-5) unstable; urgency=medium . * QA upload. * debian/control: + Bump debhelper compat to v13. * debian/rules: Use dh13 syntax. * debian/README.source: Dropped, useless. . [ Lukas Märdian ] * Adopt autotools for required 'external' parameter of AM_GNU_GETTEXT (Closes: #978372) Checksums-Sha1: c78d534b1d0ab2a56ee82097790d2dcb413ea6dc 1823 ap-utils_1.5-5.dsc 7f3220638a9a60d93f4b6b4ce0956ee94edfda3a 551875 ap-utils_1.5.orig.tar.gz dce6aa02b9d8a4299eae9a46f0494aeb9eb7252b 6536 ap-utils_1.5-5.debian.tar.xz d5353a71e3a1e18b090085d70f6d4235d6eb70a5 6031 ap-utils_1.5-5_amd64.buildinfo Checksums-Sha256: 41383811bfe23820ef9ad97b5de5a4bb24fc7e0f96bdd30109f28c4d930b9bb3 1823 ap-utils_1.5-5.dsc e94a6fe84ccd55b082c19cbb90b9af95548a06026d9c38674fc1612f71e46b72 551875 ap-utils_1.5.orig.tar.gz a762f5067d9266b927663adcce07fceb950a47f754751e6f04c51cd5eeb29cb7 6536 ap-utils_1.5-5.debian.tar.xz b5435331cc9e7c73d271cfa3a2a917163b9a98e02ecace4671fa044eec7f6060 6031 ap-utils_1.5-5_amd64.buildinfo Files: fa33696c1f9a38123503b76e03e00d1f 1823 net optional ap-utils_1.5-5.dsc 729cb5c65d2db3c949aaf9fafcc5f6ee 551875 net optional ap-utils_1.5.orig.tar.gz 2d9a88068fef738e3d89b1425c006f0e 6536 net optional ap-utils_1.5-5.debian.tar.xz fcce00aa37497a9f6190a55835ec80dd 6031 net optional ap-utils_1.5-5_amd64.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEfncpR22H1vEdkazLwpPntGGCWs4FAmFKa/gACgkQwpPntGGC Ws76gA//UumiNItOu26vHJXTDV5mtUEKbz67yuK4t2C4hFVPnfep/3ESkktGxKtl cnVaAaQZgFm3qOTtqzf4L4sfNuFPR5xLfjJaM3fQVjLBUU+lJd8ozb+MTJjh8uZ7 XKqEmnjCTzaMlmAJohLKqmMtCsa2TlpmdKQ+BB7DqYPVvU6clDFyZ7kNF6eEZaH/ z5vpqPxM0CXdwzJZ+SfA+fd9CW9e9QVrCf7FAgQC/d64BNpEJP+IhqQchorHOLhh VYuwcYIMsltil3HK2LDQz0lF9ckm8Aol/AcUTAf8Igj4jQJogq24lIhm9VjbbN2X muZnE7BDXDJK+STZ8gAoM1ArIVbwFZhkklxps13Dw7OMgu0VAODI9GkejPxWolM+ vZXfUeyFDM+oOdfZ8rbpmjNRn4BCZTMQMKcpY8YGle8T9vBryEFSUX4RFyd8rlsW UAbhkN/YDhzt0coLyk0QDwYOnCIaZtbj/an9/ft1e7v2YYMxFAbUWISi4Gggqla2 GqRks7/zTEQqqwiZfJB0NQAwlg/NjOmcNM18Q7wsr7zJKfPZcAksuMWO1pOfq12z 6yRemShGk4K6zz9adN49qkUJnMDWXOB4yy6VWfrOjwu/yUoFBeAlCrm4fToAW7td /OBrk7J1kYdw9b0FbhPi3xnqkYIhdX224Ixi1eYJX/MgNDJEKc4= =LuiW -END PGP SIGNATURE- Thank you for your contribution to Debian.
Bug#966843: marked as done (apngopt FTCBFS: uses the build architecture compiler)
Your message dated Wed, 22 Sep 2021 00:48:24 + with message-id and subject line Bug#966843: fixed in apngopt 1.2-3 has caused the Debian Bug report #966843, regarding apngopt FTCBFS: uses the build architecture compiler to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 966843: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966843 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems --- Begin Message --- Source: apngopt Version: 1.2-2 Tags: patch User: debian-cr...@lists.debian.org Usertags: ftcbfs apngopt fails to cross build from source, because it uses the build architecture compiler as a make default in debian/rules. Please consider including dpkg's buildtools.mk to fix that. Helmut diff --minimal -Nru apngopt-1.2/debian/changelog apngopt-1.2/debian/changelog --- apngopt-1.2/debian/changelog2016-05-26 12:28:45.0 +0200 +++ apngopt-1.2/debian/changelog2020-08-03 08:31:46.0 +0200 @@ -1,3 +1,9 @@ +apngopt (1.2-3) UNRELEASED; urgency=medium + + * Fix FTCBFS: Let dpkg's buildtools.mk initialize CC. (Closes: #-1) + + -- Helmut Grohne Mon, 03 Aug 2020 08:31:46 +0200 + apngopt (1.2-2) unstable; urgency=medium * QA upload. diff --minimal -Nru apngopt-1.2/debian/rules apngopt-1.2/debian/rules --- apngopt-1.2/debian/rules2013-06-04 13:03:07.0 +0200 +++ apngopt-1.2/debian/rules2020-08-03 08:31:45.0 +0200 @@ -2,6 +2,7 @@ PACKAGE = apngopt BIN= $(PACKAGE) +-include /usr/share/dpkg/buildtools.mk CC ?= gcc export DEB_BUILD_MAINT_OPTIONS = hardening=+all --- End Message --- --- Begin Message --- Source: apngopt Source-Version: 1.2-3 Done: Boyuan Yang We believe that the bug you reported is fixed in the latest version of apngopt, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 966...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Boyuan Yang (supplier of updated apngopt package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 21 Sep 2021 20:04:05 -0400 Source: apngopt Architecture: source Version: 1.2-3 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Boyuan Yang Closes: 959141 966843 Changes: apngopt (1.2-3) unstable; urgency=medium . * QA upload. * debian/patches/0001-use-autotools.patch: Use autotools as package buildsystem. + Fixes FTCBFS. (Closes: #966843) * Refresh packaging: + Bump Standards-Version to 4.6.0. + Bump debhelper compat to v13. + Update Vcs-* fields with git packaging repo on Salsa GitLab. * debian/rules: Refresh instruction. * debian/patches/0002-strcpy-avoid-stack-buffer-overflow.patch: Add patch to avoid stack buffer overflow with long filename. (Closes: #959141) Checksums-Sha1: fbc2ec2381dc391fab59ac13d82abd46bfbd14ff 1809 apngopt_1.2-3.dsc c4de00b48457667816f6734b5fe60801bf61899b 12054 apngopt_1.2.orig.tar.gz 17691193c820635cd2fc51df00d1c6887660e6f6 7152 apngopt_1.2-3.debian.tar.xz 7a5df69fd7f76ac0fe2f529dac328e6aabae783b 5941 apngopt_1.2-3_amd64.buildinfo Checksums-Sha256: 52d79e6405f59b429f6e95153a89f9ace6e02284521ebe5758f0825cfb89e0da 1809 apngopt_1.2-3.dsc 10921fe9370af697144c1e229191176689d4a8bf4e63c12a255e522d30aa8564 12054 apngopt_1.2.orig.tar.gz 11d8f1b6252cb8086c3621383542b6697228f2bf7496f9876188406ad0342b71 7152 apngopt_1.2-3.debian.tar.xz 0b03152653d639d028020cb1049108a3f6c99c851dffa4928d416ffb6f2700b6 5941 apngopt_1.2-3_amd64.buildinfo Files: 07290504b006ad531f7a4047161c8b00 1809 graphics optional apngopt_1.2-3.dsc be61f07e3163f3391e9b00f120e0a1e2 12054 graphics optional apngopt_1.2.orig.tar.gz f9e9f45f11eb4044b9c8243186abf555 7152 graphics optional apngopt_1.2-3.debian.tar.xz 7d753905c026b294f22056a210dbe494 5941 graphics optional apngopt_1.2-3_amd64.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEfncpR22H1vEdkazLwpPntGGCWs4FAmFKcx8ACgkQwpPntGGC Ws6p0hAAnaZ1wW63kHMNdhUswb6U4+CZR84tESdlBk9orMAta+c9Bz9C23rTDzPl QtFZZtMvbpkjm5BrV2pIGVtuEA139MCXPwHaER/ra+KayHARnrwD1FTWGv1oXE5G wi1iz3W6Vx5wSAp+sZcLvSdIA32W0Dt+1tMArdkZpj2G+5blx5b5x8T3Lu2VjtKf YLzW6fa0KPaBFZRrrxRbrUiy8VxRXvM4HcirLhlWbbaxopXjzsUgNjXdad65uuC
Bug#959141: marked as done (apngopt 1.2-2 stack buffer overflow)
Your message dated Wed, 22 Sep 2021 00:48:24 +
with message-id
and subject line Bug#959141: fixed in apngopt 1.2-3
has caused the Debian Bug report #959141,
regarding apngopt 1.2-2 stack buffer overflow
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
959141: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=959141
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: apngopt
Version: 1.2-2
apngopt crashes with stack buffer overflow when calling with command line
argument longer than 247 bytes.
Steps to replicate:
```
wget
http://deb.debian.org/debian/pool/main/a/apngopt/apngopt_1.2.orig.tar.gz
tar -xf apngopt_1.2.orig.tar.gz
cd apngopt-1.2.orig
make
./apngopt `python -c "print('a'*256)"`
```
Output:
```
APNG Optimizer 1.2
*** buffer overflow detected ***: ./apngopt terminated
[1]5965 abort ./apngopt `python -c "print('a'*256)"`
```
Bug is caused by copying command line argument into a 256-byte buffer using
strcpy on line 2372:
```
2363 szIn = argv[1];
2364
2365 if (argc > 2)
2366 {
2367strncpy(szOut, argv[2], 255);
2368szOut[255] = '\0';
2369 }
2370 else
2371 {
2372strcpy(szOut, szIn);
2373if ((szExt = strrchr(szOut, '.')) != NULL) *szExt = 0;
2374strcat(szOut, ".opt.png");
2375 }
```
Suggested fix: use strncpy or verify szIn length before copying.
Proposed patch:
```
2372c2372
< strcpy(szOut, szIn);
---
> strncpy(szOut, szIn, 247);
```
Best regards,
--
David Petek
--- End Message ---
--- Begin Message ---
Source: apngopt
Source-Version: 1.2-3
Done: Boyuan Yang
We believe that the bug you reported is fixed in the latest version of
apngopt, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 959...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Boyuan Yang (supplier of updated apngopt package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Format: 1.8
Date: Tue, 21 Sep 2021 20:04:05 -0400
Source: apngopt
Architecture: source
Version: 1.2-3
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group
Changed-By: Boyuan Yang
Closes: 959141 966843
Changes:
apngopt (1.2-3) unstable; urgency=medium
.
* QA upload.
* debian/patches/0001-use-autotools.patch: Use autotools as
package buildsystem.
+ Fixes FTCBFS. (Closes: #966843)
* Refresh packaging:
+ Bump Standards-Version to 4.6.0.
+ Bump debhelper compat to v13.
+ Update Vcs-* fields with git packaging repo on Salsa GitLab.
* debian/rules: Refresh instruction.
* debian/patches/0002-strcpy-avoid-stack-buffer-overflow.patch:
Add patch to avoid stack buffer overflow with long filename.
(Closes: #959141)
Checksums-Sha1:
fbc2ec2381dc391fab59ac13d82abd46bfbd14ff 1809 apngopt_1.2-3.dsc
c4de00b48457667816f6734b5fe60801bf61899b 12054 apngopt_1.2.orig.tar.gz
17691193c820635cd2fc51df00d1c6887660e6f6 7152 apngopt_1.2-3.debian.tar.xz
7a5df69fd7f76ac0fe2f529dac328e6aabae783b 5941 apngopt_1.2-3_amd64.buildinfo
Checksums-Sha256:
52d79e6405f59b429f6e95153a89f9ace6e02284521ebe5758f0825cfb89e0da 1809
apngopt_1.2-3.dsc
10921fe9370af697144c1e229191176689d4a8bf4e63c12a255e522d30aa8564 12054
apngopt_1.2.orig.tar.gz
11d8f1b6252cb8086c3621383542b6697228f2bf7496f9876188406ad0342b71 7152
apngopt_1.2-3.debian.tar.xz
0b03152653d639d028020cb1049108a3f6c99c851dffa4928d416ffb6f2700b6 5941
apngopt_1.2-3_amd64.buildinfo
Files:
07290504b006ad531f7a4047161c8b00 1809 graphics optional apngopt_1.2-3.dsc
be61f07e3163f3391e9b00f120e0a1e2 12054 graphics optional
apngopt_1.2.orig.tar.gz
f9e9f45f11eb4044b9c8243186abf555 7152 graphics optional
apngopt_1.2-3.debian.tar.xz
7d753905c026b294f22056a210dbe494 5941 graphics optional
apngopt_1.2-3_amd64.buildinfo
-BEGIN PGP SIGNATURE-
iQIzBAEBCgAdFiEEfncpR22H1vEdkazLwpPntGGCWs4FAmFKcx8ACgkQwpPntGGC
Ws6p0hAAnaZ1wW63kHMNdhUswb6U4+CZR84tESdlBk9orMAta+c9Bz9C23rTDzPl
QtFZZtMvbpkjm5BrV2pIGVtuEA139MCXPwHaER/ra+KayHARnrwD1FTWGv1oXE5G
wi1iz3W6Vx5wSAp+sZcLvSdIA32W0Dt+1tMArdkZpj2G+5blx5b5x8T3Lu2VjtKf
YLzW6fa0KPaBFZRrrxRbrUiy8VxRXvM4HcirLhlWbbaxopXjzsUgNjXdad65uuCI
ooD69SKPg3pkZi5NO7POyrL66AVkgaZkIN9LtI/kimG+LgT9oa430jYdyuhs3bGQ
WhIyaz5oy
Processing of apngopt_1.2-3_source.changes
apngopt_1.2-3_source.changes uploaded successfully to localhost along with the files: apngopt_1.2-3.dsc apngopt_1.2.orig.tar.gz apngopt_1.2-3.debian.tar.xz apngopt_1.2-3_amd64.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)
apngopt_1.2-3_source.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 21 Sep 2021 20:04:05 -0400 Source: apngopt Architecture: source Version: 1.2-3 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Boyuan Yang Closes: 959141 966843 Changes: apngopt (1.2-3) unstable; urgency=medium . * QA upload. * debian/patches/0001-use-autotools.patch: Use autotools as package buildsystem. + Fixes FTCBFS. (Closes: #966843) * Refresh packaging: + Bump Standards-Version to 4.6.0. + Bump debhelper compat to v13. + Update Vcs-* fields with git packaging repo on Salsa GitLab. * debian/rules: Refresh instruction. * debian/patches/0002-strcpy-avoid-stack-buffer-overflow.patch: Add patch to avoid stack buffer overflow with long filename. (Closes: #959141) Checksums-Sha1: fbc2ec2381dc391fab59ac13d82abd46bfbd14ff 1809 apngopt_1.2-3.dsc c4de00b48457667816f6734b5fe60801bf61899b 12054 apngopt_1.2.orig.tar.gz 17691193c820635cd2fc51df00d1c6887660e6f6 7152 apngopt_1.2-3.debian.tar.xz 7a5df69fd7f76ac0fe2f529dac328e6aabae783b 5941 apngopt_1.2-3_amd64.buildinfo Checksums-Sha256: 52d79e6405f59b429f6e95153a89f9ace6e02284521ebe5758f0825cfb89e0da 1809 apngopt_1.2-3.dsc 10921fe9370af697144c1e229191176689d4a8bf4e63c12a255e522d30aa8564 12054 apngopt_1.2.orig.tar.gz 11d8f1b6252cb8086c3621383542b6697228f2bf7496f9876188406ad0342b71 7152 apngopt_1.2-3.debian.tar.xz 0b03152653d639d028020cb1049108a3f6c99c851dffa4928d416ffb6f2700b6 5941 apngopt_1.2-3_amd64.buildinfo Files: 07290504b006ad531f7a4047161c8b00 1809 graphics optional apngopt_1.2-3.dsc be61f07e3163f3391e9b00f120e0a1e2 12054 graphics optional apngopt_1.2.orig.tar.gz f9e9f45f11eb4044b9c8243186abf555 7152 graphics optional apngopt_1.2-3.debian.tar.xz 7d753905c026b294f22056a210dbe494 5941 graphics optional apngopt_1.2-3_amd64.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEfncpR22H1vEdkazLwpPntGGCWs4FAmFKcx8ACgkQwpPntGGC Ws6p0hAAnaZ1wW63kHMNdhUswb6U4+CZR84tESdlBk9orMAta+c9Bz9C23rTDzPl QtFZZtMvbpkjm5BrV2pIGVtuEA139MCXPwHaER/ra+KayHARnrwD1FTWGv1oXE5G wi1iz3W6Vx5wSAp+sZcLvSdIA32W0Dt+1tMArdkZpj2G+5blx5b5x8T3Lu2VjtKf YLzW6fa0KPaBFZRrrxRbrUiy8VxRXvM4HcirLhlWbbaxopXjzsUgNjXdad65uuCI ooD69SKPg3pkZi5NO7POyrL66AVkgaZkIN9LtI/kimG+LgT9oa430jYdyuhs3bGQ WhIyaz5oyyQUU0e1VOpKDJj5wZIrIg0FjYogrNec3S0zHlC3ZTL10dzaltb4vOEQ o5pXyMxa1P8s35Ebx0Mr8wRat7zJ1l2fzIUg9dHA8LI/ZuJHvxBXXxlnCQTZemXr qE0T5zMjaeE+yzBMrdL6iasRtI5gSm0wkOJ/BlFK0PeUhLmu9aZlAVZp2IKku5zf dDOtwQSfRGNRO5SqL+7K7BIsE9fnsWffvckvBV/SVI3nw28CavcPfKjk5iqTPRz4 G1qPjXRDg7FExmGA9ktYzVSCs7Tg0QY6QM7zS3n3mwRn+Tq5YRWSLOrsTDV61aw1 QMA6vjA58C0n2vFmBcU2YoQlblCKHUkmbenzyTH0i+CBQ0TgoUs= =Mt56 -END PGP SIGNATURE- Thank you for your contribution to Debian.
Processing of xtermcontrol_3.8-1_source.changes
xtermcontrol_3.8-1_source.changes uploaded successfully to localhost along with the files: xtermcontrol_3.8-1.dsc xtermcontrol_3.8.orig.tar.gz xtermcontrol_3.8-1.debian.tar.xz xtermcontrol_3.8-1_source.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)
xtermcontrol_3.8-1_source.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 22 Sep 2021 02:21:51 +0200 Source: xtermcontrol Architecture: source Version: 3.8-1 Distribution: unstable Urgency: low Maintainer: Debian QA Group Changed-By: Axel Beckert Changes: xtermcontrol (3.8-1) unstable; urgency=low . * QA upload. * Set Maintainer to Debian QA Group. (See #994646) * Bump debian/watch version from unsupported 2 to current 4. * Run "wrap-and-sort -a". * Use "dh" sequencer (rewrite debian/rules) and debhelper-compat=13. + Run dh_auto_test inside an xterm under a virtual X server. Add build-dependencies on xterm, xauth and xvfb for that. + Capture STDOUT and exit code of dh_auto_test running inside an xterm. Output them later and make a separate command to exit with that exit code since xterm doesn't relay exit codes. (See #994848) + Enable all hardening flags. * Remove trailing whitespace from ancienct debian/changelog entries. * Add a Homepage header and switch homepage URL in d/copyright to HTTPS. * Set "Rules-Requires-Root: no". * Switch source format from old 1.0 to "3.0 (quilt)". * Update debian/watch to avoid trailing dot in version number. * Import new upstream release 3.8. + Update copyright years in debian/copyright. * Convert debian/copyright to machine-readable DEP5 format. + Also mention LGPL of getopt.*. * Declare compliance with Debian Policy 4.6.0. * Enable autopkgtest. Checksums-Sha1: 04bcd6b779f421426eb485579ec8eec9b99b63da 1852 xtermcontrol_3.8-1.dsc 93a86d6fcb8649ff419c3e7f53d28e8412a7b397 181399 xtermcontrol_3.8.orig.tar.gz b581b1d08f4b98f7befc1d4ad012edf7b652beec 3420 xtermcontrol_3.8-1.debian.tar.xz ea3d624ac57861cc81f798f661fe3008904c4f30 8199 xtermcontrol_3.8-1_source.buildinfo Checksums-Sha256: 3c3e04693b7a44f16a9a328c5df88e59a91034dad6a627862b0d426c8b28de3e 1852 xtermcontrol_3.8-1.dsc 561e863620e48cd85a0fd53fddf1b62e930b377f4bde3454806fc541e1b5cf8d 181399 xtermcontrol_3.8.orig.tar.gz 199c16cafe5dc34af3df383c33cb830fb210664df2e553f1448e7866ab07c9e4 3420 xtermcontrol_3.8-1.debian.tar.xz ff82066182766ed9ad585fec5ab731618f086953fd2895779102816588b93579 8199 xtermcontrol_3.8-1_source.buildinfo Files: 7f4f54adcf5456cbc6fc52463855 1852 x11 optional xtermcontrol_3.8-1.dsc 213496cd4649885b55e2bbc715658515 181399 x11 optional xtermcontrol_3.8.orig.tar.gz a1a3049929404f0101d2f10ec482bd08 3420 x11 optional xtermcontrol_3.8-1.debian.tar.xz 459e1c1d2649db1dd7eeadde44ffd9ee 8199 x11 optional xtermcontrol_3.8-1_source.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEERoyJeTtCmBnp12Ema+Zjx1o1yXUFAmFKeRQACgkQa+Zjx1o1 yXX3iA//eadk4FyIxOKiSdY7Tnmwxt1zNgCPIPhmtX5kgMsIEDXJ226NIijAeO7y Bt+oQfFcziEFZvq3c/3SatMeR8WGi8shoVC1P6L/5lNqvfr7IZCUqYZCAFW0J4pH 3N0MPuXrNyaAxOH/4sxvNHvkwWDW/eQ5LdixJTenUdP7OjvB6IWfOg7yPYE0QBDj bGhQIPlWDCTwQjiQ1+5EMU8qDiopu3ydKS/45ozrSYQLDHAXV592lwPwkG2UBTLn OoFxm475AsK5yjjrdaRQgmUxVJHYrfE5rHipF5EZutZ/0KJOq5XnBG+dgzRJPF/J 8BJPaqWWT43yEiPLPZghtTVuyLJpCDM29Px78cfdvzDHQEvxsgujrWdW1vlhhEoF R1f18Y9k1ODo0/bhxPBui1ZhB0L71m2jgZS5F76qfbtJm5e+QKWRNA215YG30GiV /BArjixt4ha005736BcHFz5yCM4QcrBu+CleHW1dMBj7S+lJTcGJccNXB2sYI4lA h0dRpHoJY5BbFSQ3GU1emfetUBcY5k/zUiH/jHyj+AC00fW3JGN298vB1Zn1n0kW 2pG56kuuOv2R7KD7WxgS8mLQWBQS512cGPhFSktT4m1M9TjwRRL3DIE5FJU2pW2r ASl5W8vACZ0dcaO5Jv9qKYeaRS4SDUWcF1cyFeZ7sWoQ8T5Uc/g= =9fEJ -END PGP SIGNATURE- Thank you for your contribution to Debian.
Processing of xtermcontrol_3.8-2_source.changes
xtermcontrol_3.8-2_source.changes uploaded successfully to localhost along with the files: xtermcontrol_3.8-2.dsc xtermcontrol_3.8-2.debian.tar.xz xtermcontrol_3.8-2_source.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)
xtermcontrol_3.8-2_source.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 22 Sep 2021 02:40:50 +0200 Source: xtermcontrol Architecture: source Version: 3.8-2 Distribution: unstable Urgency: low Maintainer: Debian QA Group Changed-By: Axel Beckert Changes: xtermcontrol (3.8-2) unstable; urgency=low . * QA upload. * Add Vcs-* headers for new packaging repo on Salsa. Checksums-Sha1: 7d41e310d3bbd733b88cf15fddeb3d7630880c4e 1968 xtermcontrol_3.8-2.dsc 3b8429685b94aca2fc408ebc5e404ebe27e7ac2a 3476 xtermcontrol_3.8-2.debian.tar.xz fd5da579a19d33e8a3d3c0f42dffb1010ba0aa77 8199 xtermcontrol_3.8-2_source.buildinfo Checksums-Sha256: 613512574601fbcf82fab1d45b581169b555a43b79deec695c24b4d8779a20e9 1968 xtermcontrol_3.8-2.dsc 7b972d93f662f4e09bbf6a076f29aeb67698d4bfcc045d4d10c44ace6b9bbbac 3476 xtermcontrol_3.8-2.debian.tar.xz 81035482567de381452b276826d01570520ebc983453c2570520f1853e1d20b0 8199 xtermcontrol_3.8-2_source.buildinfo Files: 622b1ced5480f72f25f904f4d807ff60 1968 x11 optional xtermcontrol_3.8-2.dsc fd48bdab32759aa4c060e698ead81cab 3476 x11 optional xtermcontrol_3.8-2.debian.tar.xz cc2a95f9960309175c5d4ca237a8191b 8199 x11 optional xtermcontrol_3.8-2_source.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEERoyJeTtCmBnp12Ema+Zjx1o1yXUFAmFKf98ACgkQa+Zjx1o1 yXU4BQ//bw3pN/jIke/rsrccHgWeD8i70gY/tcyLZGNbBnONOVXGn0hc9O3rOG0d 5GPzBKYImIh6zdCg6o+3560r4TAf1+mU6ilUEjOpG+qXgRhgrOhAFQW+lgucDO6Y upALJ2q1X+eo+WVc4V2+cYF5w1lqxpTHc1eSYr1YVx5drjSHeiBQmJc9SP4AWYug 3ibmsiOtKAN9jsx7vWYJVY5PByOy0Hb6DQrkSmJGqJ/YquTpypX16648sXeV29cT CNv7P7G8yKb19jaPIcjgF7PNxsDjAsacTD9Dm+yXlUlGiEQ+uJU3hbbkKkxbdnmS ySTr24MTBMYC8+7li+eYr/19g2c95XVFXkqd/YsnanB6WSZuSre/SBuSr/PtrNal KDuiO20cu3p1KuCbCaKQvgQt9GhuCpdaKECbJHCFwz76+OlCXi+qn/VfVVsRkkzY dBpJnu9HVs8zhP/jYZ2JCjVGD41JykeAaytWUUXmlQVBWIDXJxJ/mnaT5qwyzRvv nWDEEzNCF/mFRTLwm7rXshguOuZMMGJWG9876qJcn3nfuBiBrJg5DpJyHUJmvfch Zch1bmTReyEFox91sInJQGq9OX5Gp1E2CpgBzyVXDh/P5lC6vbxMPB/d3MvgEmx3 p+3AvcHqiUEjI99OwRjNYqlmBPQBeM5kwmClqaphZzs5uuIFcpI= =k7AX -END PGP SIGNATURE- Thank you for your contribution to Debian.
ifenslave is marked for autoremoval from testing
ifenslave 2.12 is marked for autoremoval from testing on 2021-09-23 It is affected by these RC bugs: 968368: ifenslave: Option bond-master fails to add interface to bond https://bugs.debian.org/968368 990428: ifenslave: Bonding not working on bullseye (using bond-slaves config) https://bugs.debian.org/990428 This mail is generated by: https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl Autoremoval data is generated by: https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl
libguess is marked for autoremoval from testing
libguess 1.2-4 is marked for autoremoval from testing on 2021-10-07 It (build-)depends on packages with these RC bugs: 992894: mit-scheme: fails to migrate to testing for too long https://bugs.debian.org/992894 This mail is generated by: https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl Autoremoval data is generated by: https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl
trickle is marked for autoremoval from testing
trickle 1.07-10.1 is marked for autoremoval from testing on 2021-10-06 It is affected by these RC bugs: 992913: trickle: FTBFS due to RPC removal from glibc https://bugs.debian.org/992913 This mail is generated by: https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl Autoremoval data is generated by: https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl
