Your message dated Sat, 17 Oct 2015 22:12:29 +0000
with message-id <[email protected]>
and subject line Bug#801734: fixed in tclcurl 7.22.0+hg20151017-1
has caused the Debian Bug report #801734,
regarding tclcurl: file output lost if -file option is used
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
801734: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=801734
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: tclcurl
Version: 7.22.0-1
Severity: important
Dear Maintainer,
This is similar to (unfixed) bug 680662 (from 3 yrs ago), but much
more severe. When the "-file" option is used for a GET, the file will
be zero in size with all data lost if the -bodyvar option is used in a
later transaction.
This is very astonishing, baffling, and frustrating to users who have
little hope of knowing what's wrong. After much time analyzing strace
output, it became clear what happens. The file is opened for writing,
and the data is in fact sent, but the file is not closed. Then use of
-bodyvar causes the filename previously used for the -file option to
be opened again! And it's not opened in append mode either. To
worsen diagnosis, nothing is written to the file, so the user cannot
see that the past filename was reused in the following operation.
This bug has a high chance of occurrance, because any session that
involves a logout at the end is likely to use -bodyvar and not -file,
because it's not interesting to save the "goodbye" page in a file, but
perhaps useful to render the variable to show the user.
This is the demonstration script, which includes commented-out
workarounds:
====8<----------------------------------------
#!/usr/bin/tclsh8.6
package require TclCurl
set curlHandle [::curl::init]
$curlHandle configure -url http://bugs.debian.org\
-file /tmp/directly_written_file.html
$curlHandle perform
puts "strace shows that the file was opened and written to (but never closed)"
# There are two undocumented workarounds at this point.
#
# (1) This workaround is the most intuitive, but it does not always
# work! It's also quite inconvenient because pre-existing config
# options must be reconfigured afterwards:
#
# $curlHandle reset
#
# (2) This workaround seems to always work, but very non-intuitive.
# Most users have no hope of figuring this out. They will just
# wonder why their file is not being written.
#
# $curl_handle configure -file /dev/null
$curlHandle configure -url http://www.fsf.org\
-bodyvar payload_fsf
$curlHandle perform
puts "this 2nd /perform/ is where the damage is done."
puts "strace shows the same file is opened again even though bodyvar is used
instead of -file."
puts "the reopening of the same filename causes it to get clobbered before it
is written and closed."
$curlHandle cleanup
puts "file holds: [exec cat /tmp/directly_written_file.html]"
====8<----------------------------------------
-- System Information:
Debian Release: 8.2
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages tclcurl depends on:
ii libc6 2.19-18+deb8u1
ii libcurl3-gnutls 7.38.0-4+deb8u2
ii tcl [tclsh] 8.6.0+8
tclcurl recommends no packages.
Versions of packages tclcurl suggests:
pn libcurl4-gnutls-dev <none>
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: tclcurl
Source-Version: 7.22.0+hg20151017-1
We believe that the bug you reported is fixed in the latest version of
tclcurl, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Sven Hoexter <[email protected]> (supplier of updated tclcurl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 17 Oct 2015 23:26:15 +0200
Source: tclcurl
Binary: tclcurl
Architecture: source amd64
Version: 7.22.0+hg20151017-1
Distribution: unstable
Urgency: low
Maintainer: Sven Hoexter <[email protected]>
Changed-By: Sven Hoexter <[email protected]>
Description:
tclcurl - Tcl bindings to libcurl
Closes: 719441 801734
Changes:
tclcurl (7.22.0+hg20151017-1) unstable; urgency=low
.
* Import a mercurial snapshot based on b5bc0662447d.
+ Removed all patches, all applied upstream. Thanks Steve.
* Remove d/watch. The old download location is no longer available.
* Update d/copyright and add the link to Steve Havelkas bitbuck repository.
* Add d/patches/bts801734.patch - thanks to Christian Werner!
(Closes: #801734)
* Add d/patches/bts719441.patch - thanks to Christian Werner!
(Closes: #719441.patch)
Checksums-Sha1:
04c2a15aa567098681ca727135dc50197e064441 1921 tclcurl_7.22.0+hg20151017-1.dsc
ff65fdd95753a900b0483d85efcbcf79262704d8 233539
tclcurl_7.22.0+hg20151017.orig.tar.gz
93b9a94afef8f66174ccd990794300ab8f39c499 7595
tclcurl_7.22.0+hg20151017-1.diff.gz
bc46a80afc3796979e96ba6e01d0c9db099e1c77 85636
tclcurl_7.22.0+hg20151017-1_amd64.deb
Checksums-Sha256:
f6ad40269c6d94c889d8a98acf4907abb25ca9854a95410a057630f8f2f604ae 1921
tclcurl_7.22.0+hg20151017-1.dsc
b7456899a67110c1176352de0b0c2339a3eb1ef6a29f01e3e2dedc1be72f954e 233539
tclcurl_7.22.0+hg20151017.orig.tar.gz
3b6d8b37c3fcaddf92e69b6dc79b758e219e967f47211931ab36f556e1917f14 7595
tclcurl_7.22.0+hg20151017-1.diff.gz
67cb99c94ea04599d62a3af616d03a1d3c4a4d638eefcc161dbe4829e43718d1 85636
tclcurl_7.22.0+hg20151017-1_amd64.deb
Files:
16acd1f12e67e624db0fccbf9f029f01 1921 interpreters extra
tclcurl_7.22.0+hg20151017-1.dsc
5c85cf5000090a13cae6fbb93a97fa79 233539 interpreters extra
tclcurl_7.22.0+hg20151017.orig.tar.gz
4f47e0e061d4924fc6d4e29781922766 7595 interpreters extra
tclcurl_7.22.0+hg20151017-1.diff.gz
d49e2923f841dfd7303b1b67c34c379d 85636 interpreters extra
tclcurl_7.22.0+hg20151017-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=tOVG
-----END PGP SIGNATURE-----
--- End Message ---
