Package: duck
Version: 0.10
Severity: normal
Usertags: tmp

I override the various environment variables that allow you to select a
different location for temporary files. DUCK completely ignores that
and hard-codes /tmp/duckXXXXXX as the argument to mkdtemp. The mkdtemp
function should no longer be used for new code. The File::Temp
functions newdir or tempdir should be used instead of mkdtemp.

pabs@chianamo ~ $ env | egrep 'TE?MP'
pabs@chianamo ~ $ env | grep TE?MP^C
pabs@chianamo ~ $ duck -v
Downloading to /tmp/duckbhcrLK
dget: retrieving

dpkg-source: error: cannot read foo.dsc: No such file or directory
pabs@chianamo ~ $ grep /tmp /usr/bin/duck
    my $tempdir=mkdtemp("/tmp/duckXXXXXX");

-- System Information:
Debian Release: stretch/sid
  APT prefers testing-debug
  APT policy: (900, 'testing-debug'), (900, 'testing'), (800, 
'unstable-debug'), (800, 'unstable'), (790, 'buildd-unstable'), (700, 
'experimental-debug'), (700, 'experimental'), (690, 'buildd-experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.6.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages duck depends on:
ii  devscripts                           2.16.7
ii  dpkg-dev                             1.18.10
ii  libconfig-inifiles-perl              2.89-1
ii  libconfig-simple-perl                4.59-6
ii  libdomain-publicsuffix-perl          0.14.1-1
ii  libfile-which-perl                   1.21-1
ii  libmailtools-perl                    2.13-1
ii  libnet-dns-perl                      1.06-1
ii  libparse-debcontrol-perl             2.005-4
ii  libpath-class-perl                   0.37-1
ii  libregexp-common-email-address-perl  1.01-4
ii  libregexp-common-perl                2016060801-1
ii  libstring-similarity-perl            1.04-1+b3
ii  libwww-curl-perl                     4.17-2+b1
ii  libxml-xpath-perl                    1.37-1
ii  libyaml-libyaml-perl                 0.63-1
ii  lynx                                 2.8.9dev9-1
ii  perl                                 5.22.2-5
ii  publicsuffix                         20160805-1

duck recommends no packages.

Versions of packages duck suggests:
ii  bzr         2.7.0+bzr6619-1
ii  git         1:2.9.3-1
ii  mercurial   3.9.1-1
ii  subversion  1.9.4-3

-- no debconf information


Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to