Your message dated Tue, 15 Apr 2025 17:33:56 +0000 with message-id <[email protected]> and subject line Bug#1099983: Removed package(s) from unstable has caused the Debian Bug report #934722, regarding urweb: _FORTIFY_SOURCE=2 causes extreme slowdown to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 934722: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=934722 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Source: urweb Version: 20170720+dfsg-2 Ur/Web’s C runtime currently builds with -D_FORTIFY_SOURCE=2 (really, with DEB_BUILD_MAINT_OPTIONS=hardening=+all), since it’s a library in the serving path. However, the runtime makes heavy use of %n format specifiers, and _FORTIFY_SOURCE=2 causes that format specifier to be incredibly slow: /tmp$ cat stuff.c #include <stdio.h> int main(int argc, char* argv[]) { int n; for (int i = 0; i < 1000000; ++i) { printf("%s%n\n", argv[1], &n); printf("%d\n", n); } } /tmp$ gcc -O3 -o stuff stuff.c /tmp$ time ./stuff 'Hello, world!' >/dev/null real 0m0.167s user 0m0.167s sys 0m0.000s /tmp$ gcc -O3 -D_FORTIFY_SOURCE=1 -o stuff stuff.c /tmp$ time ./stuff 'Hello, world!' >/dev/null real 0m0.170s user 0m0.170s sys 0m0.000s /tmp$ gcc -O3 -D_FORTIFY_SOURCE=2 -o stuff stuff.c /tmp$ time ./stuff 'Hello, world!' >/dev/null real 0m8.605s user 0m2.058s sys 0m6.482s This has been confirmed to affect Ur/Web benchmark results [1, 2]. (Short version: TechEmpower switched from a custom build of Ur/Web to using the package out of the archive and observed a 100× slowdown.) One of Ur/Web’s major selling points is its speed, and while hardening is valuable, users are likely to be surprised by Debian shipping an Ur/Web that runs orders of magnitude slower than published benchmark results. We should probably force _FORTIFY_SOURCE=1 in Ur/Web builds. [1] http://www.impredicative.com/pipermail/ur/2019-July/002850.html [2] http://www.impredicative.com/pipermail/ur/2019-August/002854.html
--- End Message ---
--- Begin Message ---Version: 20170720+dfsg-2+rm Dear submitter, as the package urweb has just been removed from the Debian archive unstable we hereby close the associated bug reports. We are sorry that we couldn't deal with your issue properly. For details on the removal, please see https://bugs.debian.org/1099983 The version of this package that was in Debian prior to this removal can still be found using https://snapshot.debian.org/. Please note that the changes have been done on the master archive and will not propagate to any mirrors until the next dinstall run at the earliest. This message was generated automatically; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]. Debian distribution maintenance software pp. Thorsten Alteholz (the ftpmaster behind the curtain)
--- End Message ---
