Your message dated Mon, 24 Oct 2011 01:02:23 +0000
with message-id <[email protected]>
and subject line Bug#643423: fixed in libgksu 2.0.13~pre1-5
has caused the Debian Bug report #643423,
regarding libgksu: FTBFS: libgksu.c:1279:7: error: format not a string literal
and no format arguments [-Werror=format-security]
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
643423: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=643423
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libgksu
Version: 2.0.13~pre1-4
Severity: serious
Tags: wheezy sid
User: [email protected]
Usertags: qa-ftbfs-20110923 qa-ftbfs hardening-format-security hardening
Justification: FTBFS on amd64
Hi,
During a rebuild of all packages in sid, your package failed to build on
amd64.
Relevant part:
> /bin/bash ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I..
> -pthread -DORBIT2=1 -I/usr/include/gtk-2.0
> -I/usr/lib/x86_64-linux-gnu/gtk-2.0/include -I/usr/include/atk-1.0
> -I/usr/include/gdk-pixbuf-2.0 -I/usr/include/pango-1.0
> -I/usr/include/pixman-1 -I/usr/include/freetype2 -I/usr/include/libpng12
> -I/usr/include/cairo -I/usr/include/gio-unix-2.0/ -I/usr/include/glib-2.0
> -I/usr/lib/glib-2.0/include -I/usr/include/gconf/2 -I/usr/include/orbit-2.0
> -I/usr/include/startup-notification-1.0 -I/usr/include/gnome-keyring-1
> -I/usr/include/libgtop-2.0 -DLOCALEDIR=\"/usr/share/locale\"
> -DDATA_DIR=\"/usr/share\" -DPREFIX=\"/usr\" -g -O2 -Wall -g -O2
> -fstack-protector --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2 -Wformat
> -Wformat-security -Werror=format-security -Wall -c -o libgksu.lo libgksu.c
> libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -pthread -DORBIT2=1
> -I/usr/include/gtk-2.0 -I/usr/lib/x86_64-linux-gnu/gtk-2.0/include
> -I/usr/include/atk-1.0 -I/usr/include/gdk-pixbuf-2.0 -I/usr/include/pango-1.0
> -I/usr/include/pixman-1 -I/usr/include/freetype2 -I/usr/include/libpng12
> -I/usr/include/cairo -I/usr/include/gio-unix-2.0/ -I/usr/include/glib-2.0
> -I/usr/lib/glib-2.0/include -I/usr/include/gconf/2 -I/usr/include/orbit-2.0
> -I/usr/include/startup-notification-1.0 -I/usr/include/gnome-keyring-1
> -I/usr/include/libgtop-2.0 -DLOCALEDIR=\"/usr/share/locale\"
> -DDATA_DIR=\"/usr/share\" -DPREFIX=\"/usr\" -g -O2 -Wall -g -O2
> -fstack-protector --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2 -Wformat
> -Wformat-security -Werror=format-security -Wall -c libgksu.c -fPIC -DPIC -o
> .libs/libgksu.o
> libgksu.c: In function 'sudo_prepare_xauth':
> libgksu.c:1279:7: error: format not a string literal and no format arguments
> [-Werror=format-security]
> libgksu.c: In function 'gksu_su_fuller':
> libgksu.c:2250:8: error: format not a string literal and no format arguments
> [-Werror=format-security]
> libgksu.c: In function 'gksu_sudo_fuller':
> libgksu.c:2982:3: error: format not a string literal and no format arguments
> [-Werror=format-security]
> libgksu.c:2844:10: warning: ignoring return value of 'fgets', declared with
> attribute warn_unused_result [-Wunused-result]
> libgksu.c:2846:10: warning: ignoring return value of 'fgets', declared with
> attribute warn_unused_result [-Wunused-result]
> libgksu.c: In function 'read_line':
> libgksu.c:2392:12: warning: ignoring return value of 'read', declared with
> attribute warn_unused_result [-Wunused-result]
> libgksu.c: In function 'gksu_su_fuller':
> libgksu.c:2061:9: warning: ignoring return value of 'read', declared with
> attribute warn_unused_result [-Wunused-result]
> libgksu.c:2115:14: warning: ignoring return value of 'write', declared with
> attribute warn_unused_result [-Wunused-result]
> libgksu.c:2116:14: warning: ignoring return value of 'write', declared with
> attribute warn_unused_result [-Wunused-result]
> libgksu.c:2194:14: warning: ignoring return value of 'write', declared with
> attribute warn_unused_result [-Wunused-result]
> libgksu.c:2198:14: warning: ignoring return value of 'write', declared with
> attribute warn_unused_result [-Wunused-result]
> libgksu.c:2202:14: warning: ignoring return value of 'write', declared with
> attribute warn_unused_result [-Wunused-result]
> libgksu.c:2210:13: warning: ignoring return value of 'read', declared with
> attribute warn_unused_result [-Wunused-result]
> libgksu.c:2265:9: warning: ignoring return value of 'read', declared with
> attribute warn_unused_result [-Wunused-result]
> libgksu.c: In function 'get_xauth_token':
> libgksu.c:1121:9: warning: ignoring return value of 'fread', declared with
> attribute warn_unused_result [-Wunused-result]
> cc1: some warnings being treated as errors
>
> make[3]: *** [libgksu.lo] Error 1
The full build log is available from:
http://people.debian.org/~lucas/logs/2011/09/23/libgksu_2.0.13~pre1-4_lsid64.buildlog
This happened because since dpkg 1.16.0 [0], hardening flags are enabled
under various conditions.
[0] http://lists.debian.org/debian-devel-announce/2011/09/msg00001.html
A list of current common problems and possible solutions is available at
http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute!
About the archive rebuild: The rebuild was done on about 50 AMD64 nodes
of the Grid'5000 platform, using a clean chroot. Internet was not
accessible from the build systems.
--- End Message ---
--- Begin Message ---
Source: libgksu
Source-Version: 2.0.13~pre1-5
We believe that the bug you reported is fixed in the latest version of
libgksu, which is due to be installed in the Debian FTP archive:
libgksu2-0_2.0.13~pre1-5_i386.deb
to main/libg/libgksu/libgksu2-0_2.0.13~pre1-5_i386.deb
libgksu2-dev_2.0.13~pre1-5_i386.deb
to main/libg/libgksu/libgksu2-dev_2.0.13~pre1-5_i386.deb
libgksu_2.0.13~pre1-5.debian.tar.gz
to main/libg/libgksu/libgksu_2.0.13~pre1-5.debian.tar.gz
libgksu_2.0.13~pre1-5.dsc
to main/libg/libgksu/libgksu_2.0.13~pre1-5.dsc
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Biebl <[email protected]> (supplier of updated libgksu package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 24 Oct 2011 02:43:21 +0200
Source: libgksu
Binary: libgksu2-0 libgksu2-dev
Architecture: source i386
Version: 2.0.13~pre1-5
Distribution: unstable
Urgency: low
Maintainer: Gustavo Noronha Silva <[email protected]>
Changed-By: Michael Biebl <[email protected]>
Description:
libgksu2-0 - library providing su and sudo functionality
libgksu2-dev - library providing su and sudo functionality (development files)
Closes: 555180 643423
Changes:
libgksu (2.0.13~pre1-5) unstable; urgency=low
.
* Switch to dpkg source format 3.0 (quilt).
* debian/control.in:
- Wrap dependencies.
- Remove obsolete versioned Build-Depends on dpkg-dev.
- Add ${misc:Depends} to libgksu2-dev.
- Bump Standards-Version to 3.9.2. No further changes.
- Remove obsolete Conflicts/Replaces.
* debian/patches/02_format-security.patch:
- Fix build failure with [-Werror=format-security]. Closes: #643423
* debian/patches/28_ld_no_as_needed.patch:
- Fix build failures with binutils-gold. Thanks Matthias Klose for the
patch. Closes: #555180
* Bump debhelper compatibility level to 8.
- Update Build-Depends on debhelper.
- Strip debian/tmp/ from .install files and simplify them a bit.
Checksums-Sha1:
d7dbfd7eb4790eccb4aa4c67706b0e091749ba5b 2297 libgksu_2.0.13~pre1-5.dsc
171176d4202a6403f2f40bcfd880813f6df25675 27701
libgksu_2.0.13~pre1-5.debian.tar.gz
bf3616342bc842fa78bb6f7b3b995c28aa1b1e00 121994
libgksu2-0_2.0.13~pre1-5_i386.deb
ea4438a58b5b834a43681879e43ade14467fcd76 61878
libgksu2-dev_2.0.13~pre1-5_i386.deb
Checksums-Sha256:
4fa6195aed74f5f5a7cc64e158c3e1166b8952697772a0fd42bcf307cf473c2a 2297
libgksu_2.0.13~pre1-5.dsc
6bb0c35ff2d79f3d6ca1aafaf031a7a162d2ff58ac33f7db06ad3fcdabfb31fa 27701
libgksu_2.0.13~pre1-5.debian.tar.gz
222406ae7f9a6f7ab55459eb5016d3266f5a6456faf4835d655634d06d2619bb 121994
libgksu2-0_2.0.13~pre1-5_i386.deb
7456aeb746669e3aa71320954840fbaa20a1aeee39724d2c56a55b0558a27ddb 61878
libgksu2-dev_2.0.13~pre1-5_i386.deb
Files:
7c1e5c238bf8700f65341fb5df706904 2297 admin optional libgksu_2.0.13~pre1-5.dsc
0f3b79dda9c24a1748424a736a42d758 27701 admin optional
libgksu_2.0.13~pre1-5.debian.tar.gz
31b84aeca493b410845e1789bc4088c7 121994 libs optional
libgksu2-0_2.0.13~pre1-5_i386.deb
59cbd43b5100daac5e1695236258518c 61878 libdevel optional
libgksu2-dev_2.0.13~pre1-5_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)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=fBhK
-----END PGP SIGNATURE-----
--- End Message ---
