Source: pidgin-librvp
Version: 0.9.7-1.1
Severity: serious
Tags: wheezy sid
User: [email protected]
Usertags: qa-ftbfs-20110923 qa-ftbfs hardening-format-security hardening
Justification: FTBFS on amd64

Hi,

During a rebuild of all packages in sid, your package failed to build on
amd64.

Relevant part:
>  gcc -DHAVE_CONFIG_H -I. -I. -I. -pthread -I/usr/include/gtk-2.0 
> -I/usr/lib/x86_64-linux-gnu/gtk-2.0/include -I/usr/include/atk-1.0 
> -I/usr/include/gdk-pixbuf-2.0 -I/usr/include/pango-1.0 
> -I/usr/include/pixman-1 -I/usr/include/freetype2 -I/usr/include/libpng12 
> -I/usr/include/pidgin -I/usr/include/libpurple -I/usr/include/cairo 
> -I/usr/include/gio-unix-2.0/ -I/usr/include/glib-2.0 
> -I/usr/lib/glib-2.0/include -I/usr/include/libxml2 -pthread 
> -I/usr/include/gtk-2.0 -I/usr/lib/x86_64-linux-gnu/gtk-2.0/include 
> -I/usr/include/atk-1.0 -I/usr/include/gdk-pixbuf-2.0 -I/usr/include/pango-1.0 
> -I/usr/include/pixman-1 -I/usr/include/freetype2 -I/usr/include/libpng12 
> -I/usr/include/cairo -I/usr/include/gio-unix-2.0/ -I/usr/include/glib-2.0 
> -I/usr/lib/glib-2.0/include -g -O2 -fstack-protector 
> --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security 
> -Werror=format-security -Wall -c rvp.c  -fPIC -DPIC -o .libs/rvp.o
> rvp.c: In function 'parse_subscriptions':
> rvp.c:785:31: warning: variable 'href' set but not used 
> [-Wunused-but-set-variable]
> rvp.c:784:19: warning: variable 'timeout' set but not used 
> [-Wunused-but-set-variable]
> rvp.c:784:10: warning: variable 'subs_id' set but not used 
> [-Wunused-but-set-variable]
> rvp.c: In function 'parse_multistatus':
> rvp.c:1402:40: warning: format '%u' expects argument of type 'unsigned int', 
> but argument 3 has type 'long int' [-Wformat]
> rvp.c: In function 'rvp_xfer_recv_read':
> rvp.c:1723:22: warning: format '%d' expects argument of type 'int', but 
> argument 3 has type 'ssize_t' [-Wformat]
> rvp.c:1723:22: warning: format '%d' expects argument of type 'int', but 
> argument 4 has type 'ssize_t' [-Wformat]
> rvp.c:1723:22: warning: format '%d' expects argument of type 'int', but 
> argument 5 has type 'long unsigned int' [-Wformat]
> rvp.c:1723:22: warning: format '%d' expects argument of type 'int', but 
> argument 6 has type 'size_t' [-Wformat]
> rvp.c:1758:3: warning: format '%d' expects argument of type 'int', but 
> argument 3 has type 'ssize_t' [-Wformat]
> rvp.c: In function 'rvp_xfer_send_write':
> rvp.c:1847:22: warning: format '%d' expects argument of type 'int', but 
> argument 3 has type 'size_t' [-Wformat]
> rvp.c:1847:22: warning: format '%d' expects argument of type 'int', but 
> argument 4 has type 'size_t' [-Wformat]
> rvp.c: In function 'rvp_parse_invite':
> rvp.c:2317:48: warning: cast to pointer from integer of different size 
> [-Wint-to-pointer-cast]
> rvp.c:2322:48: warning: cast to pointer from integer of different size 
> [-Wint-to-pointer-cast]
> rvp.c:2341:44: warning: cast to pointer from integer of different size 
> [-Wint-to-pointer-cast]
> rvp.c:2351:44: warning: cast to pointer from integer of different size 
> [-Wint-to-pointer-cast]
> rvp.c:2363:45: warning: cast to pointer from integer of different size 
> [-Wint-to-pointer-cast]
> rvp.c:2367:45: warning: cast to pointer from integer of different size 
> [-Wint-to-pointer-cast]
> rvp.c:2387:32: warning: cast to pointer from integer of different size 
> [-Wint-to-pointer-cast]
> rvp.c:2390:32: warning: cast to pointer from integer of different size 
> [-Wint-to-pointer-cast]
> rvp.c: In function 'parse_notify':
> rvp.c:2689:6: warning: variable 'to_contact' set but not used 
> [-Wunused-but-set-variable]
> rvp.c: In function 'rvp_keepalive':
> rvp.c:3533:22: warning: format '%d' expects argument of type 'int', but 
> argument 3 has type 'time_t' [-Wformat]
> rvp.c:3545:22: warning: format '%d' expects argument of type 'int', but 
> argument 3 has type 'time_t' [-Wformat]
> rvp.c: In function 'rvp_send_email':
> rvp.c:3960:10: warning: variable 'command' set but not used 
> [-Wunused-but-set-variable]
> rvp.c: In function 'rvp_set_buddy_status':
> rvp.c:4030:15: warning: variable 'stat' set but not used 
> [-Wunused-but-set-variable]
> rvp.c: In function 'rvp_set_acl':
> rvp.c:4271:3: error: format not a string literal and no format arguments 
> [-Werror=format-security]
> rvp.c:4273:13: warning: cast to pointer from integer of different size 
> [-Wint-to-pointer-cast]
> rvp.c: In function 'gc_strcmp_name':
> rvp.c:4369:3: warning: format '%s' expects argument of type 'char *', but 
> argument 4 has type 'gconstpointer' [-Wformat]
> rvp.c: In function 'rvp_send_notify':
> rvp.c:4654:15: warning: cast to pointer from integer of different size 
> [-Wint-to-pointer-cast]
> rvp.c:4385:20: warning: variable 'flags' set but not used 
> [-Wunused-but-set-variable]
> rvp.c: In function 'rvp_xfer_init_send':
> rvp.c:4717:48: warning: cast to pointer from integer of different size 
> [-Wint-to-pointer-cast]
> rvp.c:4728:41: warning: cast to pointer from integer of different size 
> [-Wint-to-pointer-cast]
> rvp.c: In function 'url_fetched_cb_cond':
> rvp.c:5354:24: warning: format '%d' expects argument of type 'int', but 
> argument 4 has type 'size_t' [-Wformat]
> rvp.c:5443:33: warning: format '%u' expects argument of type 'unsigned int', 
> but argument 3 has type 'long unsigned int' [-Wformat]
> rvp.c: In function 'rvp_async_data':
> rvp.c:5986:30: warning: format '%u' expects argument of type 'unsigned int', 
> but argument 3 has type 'time_t' [-Wformat]
> rvp.c: In function 'rvp_build_request':
> rvp.c:6423:24: warning: cast from pointer to integer of different size 
> [-Wpointer-to-int-cast]
> rvp.c:6436:22: warning: cast from pointer to integer of different size 
> [-Wpointer-to-int-cast]
> rvp.c: In function 'rvp_async_data':
> rvp.c:5929:12: warning: ignoring return value of 'write', declared with 
> attribute warn_unused_result [-Wunused-result]
> rvp.c: In function 'rvp_xfer_recv_read':
> rvp.c:1729:12: warning: ignoring return value of 'write', declared with 
> attribute warn_unused_result [-Wunused-result]
> rvp.c:1754:10: warning: ignoring return value of 'write', declared with 
> attribute warn_unused_result [-Wunused-result]
> rvp.c: In function 'rvp_import_buddies_ok_cb':
> rvp.c:6841:10: warning: ignoring return value of 'fgets', declared with 
> attribute warn_unused_result [-Wunused-result]
> cc1: some warnings being treated as errors
> 
> make[2]: *** [rvp.lo] Error 1

The full build log is available from:
   
http://people.debian.org/~lucas/logs/2011/09/23/pidgin-librvp_0.9.7-1.1_lsid64.buildlog

This happened because since dpkg 1.16.0 [0], hardening flags are enabled 
under various conditions.

[0] http://lists.debian.org/debian-devel-announce/2011/09/msg00001.html

A list of current common problems and possible solutions is available at 
http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute!

About the archive rebuild: The rebuild was done on about 50 AMD64 nodes
of the Grid'5000 platform, using a clean chroot.  Internet was not
accessible from the build systems.



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to