Florian Weimer writes:
> * Integer overflow in epoch handling
>
> (i386)$ dpkg --compare-versions 4294967296:1 '>>' 4294967295:1 ; echo $?
> 1
> (amd64)$ dpkg --compare-versions 4294967296:1 '>>' 4294967295:1 ; echo $?
> 0
Well, this is wrong if one is to take the wording of policy to mean a C
t
* Raphael Hertzog:
> On Mon, 03 May 2010, Florian Weimer wrote:
>> But I think all implementations (except an obscure Ocaml one) agree on
>> the first equality. Leading zeros are not significant here.
>>
>> On top of that, dpkg's epoch comparison algorithm yields different
>> results on differen
On Mon, 03 May 2010, Florian Weimer wrote:
> But I think all implementations (except an obscure Ocaml one) agree on
> the first equality. Leading zeros are not significant here.
>
> On top of that, dpkg's epoch comparison algorithm yields different
> results on different architectures, and does n
* Guillem Jover:
> The same problem arises with non-significant zeros before digits, for
> example:
>
> 0.001 == 0.1 == 00:000.1
>
> Although this might be trickier to see in the wild, as dpkg itself
> would not normalize these versions, but an unknowing packager could
> generate those (somehow)
On Fri, 30 Apr 2010, Guillem Jover wrote:
> > It is relatively easy for apt to ignore the epoch for the hash as it is
> > a simple hash and we don't need to care about false positive removes
> > so apt still doesn't need to do expensive parsing here, but i want
> > to ask dpkg maintainers (cc'ed an
Just to be sure: I am talking here only about the behavior of
apt then it encounters multiple package stanzas which have
the same version number (compared as dpkg does it) -
in this case apt needs a way to identify if the stanza refers to
the same version (e.g. then it is shipped in unstable and te
Guillem Jover writes:
> Hi!
>
> On Fri, 2010-04-30 at 12:56:08 +0200, David Kalnischkies wrote:
>> The problem:
>> To compare versions with the same version number apt generates
>> a hash over a few informations which are available online and
>> in dpkgs status file: all dependencies and the inst
Hi!
On Fri, 2010-04-30 at 12:56:08 +0200, David Kalnischkies wrote:
> The problem:
> To compare versions with the same version number apt generates
> a hash over a few informations which are available online and
> in dpkgs status file: all dependencies and the installation size.
> (as these are li
On Fri, 30 Apr 2010 12:56:08 +0200, David Kalnischkies wrote:
> /var/lib/dpkg/status:
>
> Package: libconfigreader-simple-perl
> Installed-Size: 96
> Replaces: squidtaild (<< 2.1a6-5.4)
> Depends: perl
> Conflicts: squidtaild (<< 2.1a6-5.4)
>
> to /var/lib/apt/lists/*_Packages:
>
> Package: lib
Hello all :)
We should have tried it ealier, i (and every other unstable/testing user)
can reproduce it easily… It is just that the popcon is low so until
now unspotted (popcon will race now drastically ;) )
The problem:
To compare versions with the same version number apt generates
a hash over a
10 matches
Mail list logo
