Your message dated Tue, 10 Jan 2012 16:52:54 +0000
with message-id <[email protected]>
and subject line Bug#654812: fixed in libsmi 0.4.8+dfsg2-5
has caused the Debian Bug report #654812,
regarding Please enabled hardened build flags
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
654812: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654812
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libsmi
Severity: important
Tags: patch
Please enabled hardened build flags through dpkg-buildflags.
Patch attached. The hardened build flags exposed missing format
strings, for which I also attached a patch.
Cheers,
Moritz
diff -aur libsmi-0.4.8+dfsg2.orig/debian/rules libsmi-0.4.8+dfsg2/debian/rules
--- libsmi-0.4.8+dfsg2.orig/debian/rules 2011-05-18 13:32:01.000000000 +0200
+++ libsmi-0.4.8+dfsg2/debian/rules 2012-01-05 22:53:28.000000000 +0100
@@ -13,7 +13,7 @@
ln -sf /usr/share/misc/config.sub .
ln -sf /usr/share/misc/config.guess .
- ./configure --prefix=/usr --mandir=\$${prefix}/share/man \
+ ./configure $(shell dpkg-buildflags --export=configure) --prefix=/usr --mandir=\$${prefix}/share/man \
--with-mibdir=/usr/share/mibs --sysconfdir=/etc \
--libexecdir=/usr/lib
Nur in libsmi-0.4.8+dfsg2/debian: rules~.
diff -aur libsmi-0.4.8+dfsg2.orig/tools/dump-tree.c libsmi-0.4.8+dfsg2/tools/dump-tree.c
--- libsmi-0.4.8+dfsg2.orig/tools/dump-tree.c 2009-11-15 12:20:25.000000000 +0100
+++ libsmi-0.4.8+dfsg2/tools/dump-tree.c 2012-01-05 22:56:21.000000000 +0100
@@ -117,7 +117,7 @@
smiElement; smiElement = smiGetNextElement(smiElement), i++) {
if (i > 0) fprintf(f, ",");
if (indexname) {
- fprintf(f, indexname);
+ fprintf(f, "%s", indexname);
}
indexname = smiGetElementNode(smiElement)->name;
}
@@ -143,7 +143,7 @@
smiElement = smiGetNextElement(smiElement), i++) {
if (i > 0) fprintf(f, ",");
if (objectname) {
- fprintf(f, objectname);
+ fprintf(f, "%s", objectname);
}
objectname = smiGetElementNode(smiElement)->name;
}
Nur in libsmi-0.4.8+dfsg2/tools: dump-tree.c~.
--- End Message ---
--- Begin Message ---
Source: libsmi
Source-Version: 0.4.8+dfsg2-5
We believe that the bug you reported is fixed in the latest version of
libsmi, which is due to be installed in the Debian FTP archive:
libsmi2-common_0.4.8+dfsg2-5_all.deb
to main/libs/libsmi/libsmi2-common_0.4.8+dfsg2-5_all.deb
libsmi2-dbg_0.4.8+dfsg2-5_amd64.deb
to main/libs/libsmi/libsmi2-dbg_0.4.8+dfsg2-5_amd64.deb
libsmi2-dev_0.4.8+dfsg2-5_amd64.deb
to main/libs/libsmi/libsmi2-dev_0.4.8+dfsg2-5_amd64.deb
libsmi2ldbl_0.4.8+dfsg2-5_amd64.deb
to main/libs/libsmi/libsmi2ldbl_0.4.8+dfsg2-5_amd64.deb
libsmi_0.4.8+dfsg2-5.debian.tar.gz
to main/libs/libsmi/libsmi_0.4.8+dfsg2-5.debian.tar.gz
libsmi_0.4.8+dfsg2-5.dsc
to main/libs/libsmi/libsmi_0.4.8+dfsg2-5.dsc
smistrip_0.4.8+dfsg2-5_all.deb
to main/libs/libsmi/smistrip_0.4.8+dfsg2-5_all.deb
smitools_0.4.8+dfsg2-5_amd64.deb
to main/libs/libsmi/smitools_0.4.8+dfsg2-5_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Vincent Bernat <[email protected]> (supplier of updated libsmi package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 07 Jan 2012 14:39:48 +0100
Source: libsmi
Binary: smitools smistrip libsmi2ldbl libsmi2-dev libsmi2-dbg libsmi2-common
Architecture: source amd64 all
Version: 0.4.8+dfsg2-5
Distribution: unstable
Urgency: low
Maintainer: Vincent Bernat <[email protected]>
Changed-By: Vincent Bernat <[email protected]>
Description:
libsmi2-common - library to access SMI MIB information - MIB module files
libsmi2-dbg - library to access SMI MIB information - debugging symbols
libsmi2-dev - library to access SMI MIB information - development files
libsmi2ldbl - library to access SMI MIB information
smistrip - extract MIB from text files like RFC
smitools - various tools operating on MIB module files
Closes: 654812
Changes:
libsmi (0.4.8+dfsg2-5) unstable; urgency=low
.
* Switch to debhelper 9 with tiny set of rules.
This also happens to enable hardening flags. Closes: #654812.
* Programs in libsmi2ldbl are now shipped in `smitool` package.
* Enable multiarch for libsmi2ldbl.
Checksums-Sha1:
8a111a401f40f3ad7231d2c0adfc5b8fd10c7a5e 1487 libsmi_0.4.8+dfsg2-5.dsc
6f139883737eb4180edbac11c9fef3540e8628ca 11051
libsmi_0.4.8+dfsg2-5.debian.tar.gz
768ee1dd54a7455241ac01d783da6ee0d7256847 234502
smitools_0.4.8+dfsg2-5_amd64.deb
01d5053c542f471d19e714f1afe473c8eb353d65 28916 smistrip_0.4.8+dfsg2-5_all.deb
5a53636c5da90dd3b6c001f500d59edf77aee7f3 147552
libsmi2ldbl_0.4.8+dfsg2-5_amd64.deb
3d10688eea32039b79b3022eda122a26430c089f 168916
libsmi2-dev_0.4.8+dfsg2-5_amd64.deb
58c6d6530876a230a504035d869d01ee6664ced9 131412
libsmi2-dbg_0.4.8+dfsg2-5_amd64.deb
c22a3db8667cd87a73fadfedfc7e049dbeeb0b8a 25544
libsmi2-common_0.4.8+dfsg2-5_all.deb
Checksums-Sha256:
cee684f5c5f137a82df226b582c0b81c1b3a62f8888132608a0c1d5907431193 1487
libsmi_0.4.8+dfsg2-5.dsc
25b6edfdaf04b6e46e295c5187c36d79d17ce33f6e8cba0e6d36e9160ce944dc 11051
libsmi_0.4.8+dfsg2-5.debian.tar.gz
e98c7609285e7eaecaf1aa46d0e30199f1d0d1e6e339ec8c3f64a6b04b7ede50 234502
smitools_0.4.8+dfsg2-5_amd64.deb
9239a6c84fa291ebdaf4693b798cf0aa45bfe48f63ccf5dd059419179351995f 28916
smistrip_0.4.8+dfsg2-5_all.deb
421fe6f1bce847f19f9248baa213da9fb3e4c5caf39759a6819a691977d06444 147552
libsmi2ldbl_0.4.8+dfsg2-5_amd64.deb
a1ec8b9bfe089678c493f9856f53a885d0811ee0b73d188a48424d6ea40e331b 168916
libsmi2-dev_0.4.8+dfsg2-5_amd64.deb
57fd7d494a34707e930a950b0516ec342f3cad16599ff591008ea3ac29b5f2bd 131412
libsmi2-dbg_0.4.8+dfsg2-5_amd64.deb
3372776ad8d605a3640f1b57002a4a585d9d730fbf2324ed3f2227c3beb7eaaf 25544
libsmi2-common_0.4.8+dfsg2-5_all.deb
Files:
ac66f3344d1f4b717fe620f00bbd5268 1487 libs optional libsmi_0.4.8+dfsg2-5.dsc
78126a96d7ada0801546afb68afd6854 11051 libs optional
libsmi_0.4.8+dfsg2-5.debian.tar.gz
b7f1c52905582a29fe27d2227eda608e 234502 libs optional
smitools_0.4.8+dfsg2-5_amd64.deb
d7c87e81d155b33eb31c7e99e8d294ee 28916 libs optional
smistrip_0.4.8+dfsg2-5_all.deb
670e9f892ff8ebb6dd7895f3f3f00dd1 147552 libs optional
libsmi2ldbl_0.4.8+dfsg2-5_amd64.deb
ab6f336b63adf8b895b858762d4ca1b3 168916 libdevel optional
libsmi2-dev_0.4.8+dfsg2-5_amd64.deb
1f8f19e65051ffe92933ed47c1ebc01b 131412 debug extra
libsmi2-dbg_0.4.8+dfsg2-5_amd64.deb
4786c3e083b0767cf5a0388cfa6c9cda 25544 oldlibs extra
libsmi2-common_0.4.8+dfsg2-5_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iEYEARECAAYFAk8IZUIACgkQKFvXofIqeU6UcACdFA3fRUJDSgXhUWUnZ9izVe0d
l2UAoJYdiLa03HJVSlzfENzGBC+jXXGT
=W9CV
-----END PGP SIGNATURE-----
--- End Message ---
