Your message dated Wed, 15 Jun 2016 16:26:47 +0000
with message-id <[email protected]>
and subject line Bug#784959: fixed in blhc 0.06-0.1
has caused the Debian Bug report #784959,
regarding blhc: possible false positive about missing CPPFLAGS in a linker call
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
784959: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784959
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: blhc
Version: 0.04+20140813+gitac2b8ce-1
Severity: normal
For cpputest I get two reports (out of 80 calls scanned) of CPPFLAGS
missing:
$ blhc deb/pkg/build-area/cpputest_3.7.2-1_amd64.build
CPPFLAGS missing (-D_FORTIFY_SOURCE=2): libtool: link: g++ -include
./include/CppUTest/MemoryLeakDetectorNewMacros.h -Wall -Wextra -Wshadow
-Wswitch-default -Wswitch-enum -Wconversion -pedantic -Wsign-conversion
-Woverloaded-virtual -Wno-disabled-macro-expansion -Wno-padded
-Wno-global-constructors -Wno-exit-time-destructors -Wno-weak-vtables
-Wno-old-style-cast -g -O2 -fstack-protector-strong -Wformat
-Werror=format-security -Wl,-z -Wl,relro -o CppUTestTests
CppUTestTests-AllocationInCFile.o CppUTestTests-AllocationInCppFile.o
CppUTestTests-AllocLetTestFree.o CppUTestTests-AllocLetTestFreeTest.o
CppUTestTests-AllTests.o CppUTestTests-CheatSheetTest.o
CppUTestTests-CommandLineArgumentsTest.o
CppUTestTests-CommandLineTestRunnerTest.o CppUTestTests-JUnitOutputTest.o
CppUTestTests-MemoryLeakDetectorTest.o
CppUTestTests-MemoryLeakOperatorOverloadsTest.o
CppUTestTests-MemoryLeakWarningTest.o CppUTestTests-PluginTest.o
CppUTestTests-PreprocessorTest.o CppUTestTests-SetPluginTest.o CppUTest
Tests-SimpleStringTest.o CppUTestTests-SimpleMutexTest.o
CppUTestTests-TestFailureNaNTest.o CppUTestTests-TestFailureTest.o
CppUTestTests-TestFilterTest.o CppUTestTests-TestHarness_cTest.o
CppUTestTests-TestHarness_cTestCFile.o CppUTestTests-TestInstallerTest.o
CppUTestTests-TestMemoryAllocatorTest.o CppUTestTests-TestOutputTest.o
CppUTestTests-TestRegistryTest.o CppUTestTests-TestResultTest.o
CppUTestTests-TestUTestMacro.o CppUTestTests-UtestTest.o
CppUTestTests-UtestPlatformTest.o lib/libCppUTest.a -lpthread
CPPFLAGS missing (-D_FORTIFY_SOURCE=2): libtool: link: g++ -include
./include/CppUTest/MemoryLeakDetectorNewMacros.h -Wall -Wextra -Wshadow
-Wswitch-default -Wswitch-enum -Wconversion -pedantic -Wsign-conversion
-Woverloaded-virtual -Wno-disabled-macro-expansion -Wno-padded
-Wno-global-constructors -Wno-exit-time-destructors -Wno-weak-vtables
-Wno-old-style-cast -g -O2 -fstack-protector-strong -Wformat
-Werror=format-security -Wl,-z -Wl,relro -o CppUTestExtTests
CppUTestExtTests-AllTests.o CppUTestExtTests-CodeMemoryReportFormatterTest.o
CppUTestExtTests-GMockTest.o CppUTestExtTests-GTest1Test.o
CppUTestExtTests-GTest2ConvertorTest.o
CppUTestExtTests-MemoryReportAllocatorTest.o
CppUTestExtTests-MemoryReporterPluginTest.o
CppUTestExtTests-MemoryReportFormatterTest.o
CppUTestExtTests-MockActualCallTest.o CppUTestExtTests-MockCheatSheetTest.o
CppUTestExtTests-MockExpectedCallTest.o
CppUTestExtTests-MockExpectedFunctionsListTest.o
CppUTestExtTests-MockFailureTest.o CppUTestExtTests-MockP
luginTest.o CppUTestExtTests-MockSupportTest.o
CppUTestExtTests-MockSupport_cTest.o CppUTestExtTests-MockSupport_cTestCFile.o
CppUTestExtTests-OrderedTestTest.o lib/libCppUTestExt.a lib/libCppUTest.a
-lpthread
If you look at those calls, they boil down to "g++ [noise] -o foo foo.o bar.o
[more object files] -lpthread" and as such I believe that they need neither
CFLAGS nor CPPFLAGS. However CFLAGS appear to be injected and possibly due to
this, blhc complains about the missing CPPFLAGS.
It would be nice to not get those false positives.
-- System Information:
Debian Release: stretch/sid
APT prefers squeeze-lts
APT policy: (500, 'squeeze-lts'), (500, 'oldoldstable'), (500, 'unstable'),
(500, 'stable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages blhc depends on:
ii libdpkg-perl 1.17.25
blhc recommends no packages.
blhc suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: blhc
Source-Version: 0.06-0.1
We believe that the bug you reported is fixed in the latest version of
blhc, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
gregor herrmann <[email protected]> (supplier of updated blhc package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 05 Jun 2016 17:07:19 +0200
Source: blhc
Binary: blhc
Architecture: source all
Version: 0.06-0.1
Distribution: unstable
Urgency: medium
Maintainer: Jari Aalto <[email protected]>
Changed-By: gregor herrmann <[email protected]>
Description:
blhc - build log hardening check
Closes: 765756 772853 784959 801492 825428 825671
Changes:
blhc (0.06-0.1) unstable; urgency=medium
.
* Non-maintainer upload.
* New upstream release.
Fixes the following bugs:
- "gets confused by output from gcc -v, g++ -v and reports false
positives" (Closes: #765756)
- "false positive: LDFLAGS missing (-Wl, -z, relro): rm -f afl-gcc ..."
(Closes: #772853)
- "possible false positive about missing CPPFLAGS in a linker call"
(Closes: #784959)
- "false positive for non verbose build" (Closes: #801492)
- "FTBFS with Perl 5.24: Pod::Usage formatting changed" (Closes: #825428)
- "false positives for comment lines" (Closes: #825671)
* Update years of upstream copyright.
* Change various URLs to use HTTPS in debian/control and
debian/copyright. Thanks to duck and lintian.
* Declare compliance with Debian Policy 3.9.8.
Checksums-Sha1:
71317d01c85422ff70fde9a019537e0b6d1ea1fb 1933 blhc_0.06-0.1.dsc
faebb9c65e8c7ed2b0fc8480dc638f4cda4d5900 63199 blhc_0.06.orig.tar.gz
821db0a24760f251bcf274a41cb36b82d1fdbc1d 3256 blhc_0.06-0.1.debian.tar.xz
eb16ef9b2d66cf697edf538fdd7fa25374149594 26250 blhc_0.06-0.1_all.deb
Checksums-Sha256:
3de8ce60bf59d81fb80692fe18eccc634beb99896b7708d8638fc96935086cfe 1933
blhc_0.06-0.1.dsc
0a3ef3cc318eed68eadff6d55989c65ac72cfd3f1b8cdf2261af58f89a0dc782 63199
blhc_0.06.orig.tar.gz
40ab111d51860a2be8f1a5fbe85c8ef61d376c2d860e296227aa9bd928497ce0 3256
blhc_0.06-0.1.debian.tar.xz
da62ab552a8d19589726ee5cdda2275973a5aa5a328ca03e40675b2902a218f2 26250
blhc_0.06-0.1_all.deb
Files:
6e48ea529f587abbc1ae4bdb9bbd5897 1933 utils optional blhc_0.06-0.1.dsc
0124ecac5bbabc424eee6300808a336f 63199 utils optional blhc_0.06.orig.tar.gz
1b1002e72726aa7e17297c23c9687ce9 3256 utils optional
blhc_0.06-0.1.debian.tar.xz
a08270a598f8695442f641a77d6ffddd 26250 utils optional blhc_0.06-0.1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=YmYS
-----END PGP SIGNATURE-----
--- End Message ---
