Your message dated Wed, 23 Aug 2023 14:35:26 +0000
with message-id <[email protected]>
and subject line Bug#1033406: fixed in libconfig-model-dpkg-perl 3.001
has caused the Debian Bug report #1033406,
regarding licensecheck: scan-copyrights fails to create copyright file for
texlive-extra
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1033406: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033406
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: licensecheck
Version: 3.3.5-1
Severity: normal
Tags: upstream
X-Debbugs-Cc: [email protected]
Dear Maintainer,
scan-copyrights is unable to create the copyright file when using texlive-extra
sources
(https://deb.debian.org/debian/pool/main/t/texlive-extra/texlive-extra_2020.20210202-3.dsc).
The below program crashes,
#!/usr/bin/env python3
import sh
scan_copyrights = sh.Command('scan-copyrights')
def main():
try:
scan_copyrights()
except sh.ErrorReturnCode as e:
print("An error occurred:", e.stderr, file=sys.stderr)
sys.exit(1)
except Exception as e:
print("An unknown error occurred:", e, file=sys.stderr)
sys.exit(1)
if __name__ == '__main__':
main()
Output:
raise exc
sh.ErrorReturnCode_255:
RAN: /usr/bin/scan-copyrights
It appears that the following files may be causing the issue:
./texmf-dist/fonts/type1/public/baskervillef/BaskervilleF-Bold.pfb
./texmf-dist/fonts/type1/public/baskervillef/BaskervilleF-BoldItalic.pfb
./texmf-dist/tex/latex/exp-testopt/exp-testopt.sty
Removing these files prevents the program from crashing, but individual runs of
licensecheck on
these files do not result in any issues. This issue has been observed with
libconfig-model-dpkg-perl versions 2.143 and 2.165,
licensecheck version 3.1.1-2 and 3.3.5-1. This issue is not consistently
reproducible.
scan-copyrights crashes because the output from licensecheck looks invalid.
licensecheck tries to parse the binary file (pfb) and returns invalid data.
As per the comment in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=828941,
it is mentioned,
For use right now, I recommend to combine licensecheck with helper
scripts part of cdbs (but *not* build-depend on or otherwise use cdbs).
For examples of using those helper scripts to pre-parse some binary
files and skip select other ones, while not accidentally silencing later
introduced unknown types of files, see file debian/copyright-check in
the source code of ghostscript (or pandoc or valentina), and the files
/usr/lib/cdbs/license-miner and /usr/lib/cdbs/licensecheck2dep5 in
package cdbs.
Please let me know if this recommendation can be followed or if there are any
other fixes for this issue.
Thank you.
Regards,
Vignesh
-- System Information:
Debian Release: 12.0
APT prefers testing-security
APT policy: (500, 'testing-security'), (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 6.1.0-6-amd64 (SMP w/1 CPU thread; PREEMPT)
Locale: LANG=en_IN, LC_CTYPE=en_IN (charmap=UTF-8), LANGUAGE=en_IN:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages licensecheck depends on:
ii libfeature-compat-class-perl 0.05-1
ii libfeature-compat-try-perl 0.05-1
ii libio-interactive-perl 1.023-2
ii liblist-someutils-perl 0.59-1
ii liblog-any-adapter-screen-perl 0.140-2
ii liblog-any-perl 1.713-1
ii libnamespace-clean-perl 0.27-2
ii libpath-iterator-rule-perl 1.015-2
ii libpath-tiny-perl 0.144-1
ii libpod-constants-perl 0.19-2
ii libstrictures-perl 2.000006-1
ii libstring-copyright-perl 0.003014-1
ii libstring-escape-perl 2010.002-3
ii libstring-license-perl 0.0.2-1
ii perl 5.36.0-7
Versions of packages licensecheck recommends:
ii libregexp-pattern-license-perl 3.9.4-3
Versions of packages licensecheck suggests:
ii bash-completion 1:2.11-6
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: libconfig-model-dpkg-perl
Source-Version: 3.001
Done: Dominique Dumont <[email protected]>
We believe that the bug you reported is fixed in the latest version of
libconfig-model-dpkg-perl, which is due to be installed in the Debian FTP
archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Dominique Dumont <[email protected]> (supplier of updated
libconfig-model-dpkg-perl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 23 Aug 2023 16:06:45 +0200
Source: libconfig-model-dpkg-perl
Architecture: source
Version: 3.001
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <[email protected]>
Changed-By: Dominique Dumont <[email protected]>
Closes: 1033406
Changes:
libconfig-model-dpkg-perl (3.001) unstable; urgency=medium
.
[ Dominique Dumont ]
* This new release features a major rewrite of Copyright Scanner and
Copyright update. As a result, the scanner algorithm was changed and
you may observe slightly different results in debian/copyright file.
(Closes: 1033406)
* Dropped "check" parameter from copyright-scan-patterns.yml file. Now all
files are parsed, excepts binary files. You still may specify file patterns
to exclude some files in debian/copyright-scan-patterns.yml.
* control:
* remove dependency on libdata-compare-perl
* add dependency on libsoftware-copyright-perl
* add build dependency on libtest-synopsis-expectation-perl
Checksums-Sha1:
729ae50527b7fb088f5f44419666874ef324e54e 3050
libconfig-model-dpkg-perl_3.001.dsc
2ff1a9240f7a1647243627eb515d0e353263907e 416900
libconfig-model-dpkg-perl_3.001.tar.xz
dc57fc569b1409b538397c1e64ac1e7fada58641 7545
libconfig-model-dpkg-perl_3.001_source.buildinfo
Checksums-Sha256:
1d01834a320b39d7f7eaa1fd301d74b41ee78d987eff465f945387a1600a2f47 3050
libconfig-model-dpkg-perl_3.001.dsc
436e280a4c1ee0da5e0615b9da329e2763e2268584f3055a960e1372b78c90d0 416900
libconfig-model-dpkg-perl_3.001.tar.xz
7087eef5aa038afaef3f4dd9115229a6ba1d2268ee4b7b05d4ace133dae371aa 7545
libconfig-model-dpkg-perl_3.001_source.buildinfo
Files:
148f82b9059f3f976fabe4e5a84b8df9 3050 perl optional
libconfig-model-dpkg-perl_3.001.dsc
1945c36a7481a3ac08b6c3f24985e966 416900 perl optional
libconfig-model-dpkg-perl_3.001.tar.xz
ca075c0bfa538688de5ea8879d8e2272 7545 perl optional
libconfig-model-dpkg-perl_3.001_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEn3I5/LZk8Qsz6dwDwx9P2UmrK2wFAmTmFOoACgkQwx9P2Umr
K2zEpA/9Hfv4Ryk50IOa70s0VjxyfDQ2EoxS7vyzRPUl9F71NVDJc7ShKbaEP3HD
eY0y3ljmdH6U5q1B37wzBXzAbYRjoaJnK7pBJl/lP4INmnVOY1HhfekFIKljh+Fz
q8SrO4dhRt9ycYPO4vEI7vz0P1HUoS0MW7EpjnigPRxQ0y/+SWo913wy9DND9pCg
+xyXw1LtD6I1CVLIZd6YYOrH7NsqVxomSWy0CNWe7vj/q5f5UyEcjR3jjSEhORXs
i5FfSAXn/P5/zCAmWWVP7P1TR9pUp5S33aZtNkQ82/pFGliqKIDcoCqYWUQmWVE9
MZUDgV40iq8nX0FP8E5bKW80Ojs6KTwpy7GVEtTr1u534FdpEJYBQjqHdcR0+RV4
zoriwCSkgwPBgLhMopIU38Dg1H1Kv20hefBRUFZ6Nqr23OBiAN/QZzbI+iavne1o
wQiPOhRvUspJajWd0I80Q/zc926WVJlXHiyqtMJ2QBCLqkyahqCbuAvBfHKQVUxH
3nqwDwmfT1INGN5jJeMO4odhvaUttMFRKKdkiOTkVIU0M3mnso0PyGYochb9TDm0
yIJFMYJ2FLAZzHp9dSmDt+4yUdPi9ZBl2TmWieRAAs4g9SftYw3c3M+ZYW2bygB1
xn/hKsn+ZJxgTkvWUZzAscKpy3nJRsLkR5NLMOeX0kfRVyyeUIs=
=U8/D
-----END PGP SIGNATURE-----
--- End Message ---