Package: devscripts
Version: 2.8.14
Severity: normal

It is my impression that current uscan program downloads the upstream
package believing indicated web page information but it does not check
the sanity of downloaded file contents after the download.

For some URL such as ones starting http://prdownloads.sf.net ,
the download link sometimes return the original web page or similar (I
confirmed this by "wget".)  This seems to be intentional action on the
miror site when user do not pay for subscription fee for some link. [*]

Of course cheap user like me do not pay to join subscription service.

The combination of above 2 things seems to be the cause of watch file
being not so popular.  Because uscan download finishes without useful
error but update does not happen and error then.

Downloaded file strting "<HTML><HEAD>" is sure call to flag file being
not intended one.  (Maybe use of file command may be good idea.)

I think checking initial few bytes as sanity check should not be
considered just wishlist request but very important part of uscan
functionality.  At least command should fail with iclear error message
and should not store non-valid upstream source package.

Of course scanning all the mirror is nice additional feature but that
will be wishlist bug which I do not know we should hack now.  I am not
proposing on this complicated direction but asking the system to fail
properly under such situation.

osamu

[*] some deep linking to the remote site seems to allow uscan to
function but that will make it very prone to missing links upon SF
changes.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.11
Locale: LANG=C, LC_CTYPE=en_US.ISO-8859-1 (charmap=ISO-8859-1)

Versions of packages devscripts depends on:
ii  debianutils                 2.13.2       Miscellaneous utilities specific t
ii  dpkg-dev                    1.10.27      Package building tools for Debian
ii  libc6                       2.3.2.ds1-20 GNU C Library: Shared libraries an
ii  perl                        5.8.4-8      Larry Wall's Practical Extraction 
ii  sed                         4.1.4-2      The GNU sed stream editor

-- no debconf information

-- 
~\^o^/~~~ ~\^.^/~~~ ~\^*^/~~~ ~\^_^/~~~ ~\^+^/~~~ ~\^:^/~~~ ~\^v^/~~~ +++++
        Osamu Aoki <[EMAIL PROTECTED]>  Brussels Belgium, GPG-key: A8061F32
 .''`.  Debian Reference: post-installation user's guide for non-developers
 : :' : http://qref.sf.net and http://people.debian.org/~osamu
 `. `'  "Our Priorities are Our Users and Free Software" --- Social Contract



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to