Hi Milan,

may I again ask for an example code snippet to reproduce the bug? So far
I was not successful to find a reproducer.

Cheers,
 jonas

Am 09.10.2016 um 22:58 schrieb Jonas Meurer:
> Hi Milan, hi Michael,
> 
> Am 09.10.2016 um 20:55 schrieb Michael Stapelberg:
>> [+cc mejo, who did the upload in question]
> 
> Thanks for Cc'ing me.
> 
>> Looking into
>> http://security.debian.org/debian-security/pool/updates/main/libt/libtomcrypt/libtomcrypt_1.17-3.2+deb7u1.diff.gz,
>> I see debian/rules contains this line:
>>
>> +CFLAGS += -DGMP_DESC -DLTM_DESC -DUSE_LTM
>>
>> So the flag seems to be set accordingly.
>>
>> Not quite sure what’s wrong here.
> 
> Indeed, the LTM_DESC flag is set at compile time. The 1.17-3.2+deb7u1
> upload should not have changed anything here.
> 
> Milan, do you have an example code snippet to reproduce the bug?
> 
> Cheers,
>  jonas
> 
>> On Thu, Sep 22, 2016 at 10:52 AM, Milan Budala <milan.bud...@gmail.com
>> <mailto:milan.bud...@gmail.com>> wrote:
>>
>>     Package: libtomcrypt-dev
>>     Version: 1.17-3.2+deb7u1
>>     Severity: important
>>
>>     Security update 1.17-3.2+deb7u1 breaks libtommath integration
>>     ('undefined reference to ltm_desc' linking error).
>>     No problems with version 1.17-3.2. The build should probably define
>>     LTM_DESC.
>>
>>     -- System Information:
>>     Debian Release: 7.11
>>       APT prefers oldstable-updates
>>       APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
>>     Architecture: amd64 (x86_64)
>>
>>     Kernel: Linux 3.18.17-core2-rt14 (SMP w/1 CPU core; PREEMPT)
>>     Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
>>     Shell: /bin/sh linked to /bin/dash
>>
>>     Versions of packages libtomcrypt-dev depends on:
>>     ii  libtomcrypt0  1.17-3.2+deb7u1
>>
>>     libtomcrypt-dev recommends no packages.
>>
>>     libtomcrypt-dev suggests no packages.
>>
>>     -- no debconf information
>>
>>
>>
>>
>> -- 
>> Best regards,
>> Michael
> 
> 

Reply via email to