Hi Milan, may I again ask for an example code snippet to reproduce the bug? So far I was not successful to find a reproducer.
Cheers, jonas Am 09.10.2016 um 22:58 schrieb Jonas Meurer: > Hi Milan, hi Michael, > > Am 09.10.2016 um 20:55 schrieb Michael Stapelberg: >> [+cc mejo, who did the upload in question] > > Thanks for Cc'ing me. > >> Looking into >> http://security.debian.org/debian-security/pool/updates/main/libt/libtomcrypt/libtomcrypt_1.17-3.2+deb7u1.diff.gz, >> I see debian/rules contains this line: >> >> +CFLAGS += -DGMP_DESC -DLTM_DESC -DUSE_LTM >> >> So the flag seems to be set accordingly. >> >> Not quite sure what’s wrong here. > > Indeed, the LTM_DESC flag is set at compile time. The 1.17-3.2+deb7u1 > upload should not have changed anything here. > > Milan, do you have an example code snippet to reproduce the bug? > > Cheers, > jonas > >> On Thu, Sep 22, 2016 at 10:52 AM, Milan Budala <[email protected] >> <mailto:[email protected]>> wrote: >> >> Package: libtomcrypt-dev >> Version: 1.17-3.2+deb7u1 >> Severity: important >> >> Security update 1.17-3.2+deb7u1 breaks libtommath integration >> ('undefined reference to ltm_desc' linking error). >> No problems with version 1.17-3.2. The build should probably define >> LTM_DESC. >> >> -- System Information: >> Debian Release: 7.11 >> APT prefers oldstable-updates >> APT policy: (500, 'oldstable-updates'), (500, 'oldstable') >> Architecture: amd64 (x86_64) >> >> Kernel: Linux 3.18.17-core2-rt14 (SMP w/1 CPU core; PREEMPT) >> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) >> Shell: /bin/sh linked to /bin/dash >> >> Versions of packages libtomcrypt-dev depends on: >> ii libtomcrypt0 1.17-3.2+deb7u1 >> >> libtomcrypt-dev recommends no packages. >> >> libtomcrypt-dev suggests no packages. >> >> -- no debconf information >> >> >> >> >> -- >> Best regards, >> Michael > >

