Your message dated Sat, 03 Sep 2022 12:49:09 +0000
with message-id <e1ousad-00ed90...@fasolo.debian.org>
and subject line Bug#1000421: fixed in dpkg 1.20.12
has caused the Debian Bug report #1000421,
regarding dpkg-shlibdeps: Wrong minimum version requirement on libc6
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
1000421: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000421
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: dpkg-dev
Version: 1.20.9
Severity: serious
Control: affects -1 cppcheck

Hi,

dpkg-shlibdeps calculates too low minimum version requirements for cppcheck on 
libc6 (see bug 1000146).

To reproduce, build cppcheck 2.6-1 in unstable chroot without cleaning up, 
e.g., "dpkg-buildpackage -rfakeroot -us -uc".

$ grep Depends debian/cppcheck/DEBIAN/control
Depends: libc6 (>= 2.29), [...]

But running the binary with libc6 2.31 fails with

cppcheck: ./libc.so.6: version `GLIBC_2.32' not found (required by cppcheck)
cppcheck: ./libc.so.6: version `GLIBC_2.32' not found (required by 
/usr/lib/x86_64-linux-gnu/libstdc++.so.6)
cppcheck: ./libc.so.6: version `GLIBC_2.32' not found (required by 
/lib/x86_64-linux-gnu/libpthread.so.0)

I believe that is the case because a certain symbol in the .bss section is 
ignored (this is the only symbol with 2.32 suffix):

$ objdump -w -T ./debian/cppcheck/usr/bin/cppcheck | grep __libc_single_threaded
00000000004670e0 g    DO .bss   0000000000000001  GLIBC_2.32  
__libc_single_threaded

$ nm -D ./debian/cppcheck/usr/bin/cppcheck | grep __libc_single_threaded
00000000004670e0 B __libc_single_threaded@@GLIBC_2.32

$ dpkg-shlibdeps ./debian/cppcheck/usr/bin/cppcheck; cat debian/substvars
shlibs:Depends=libc6 (>= 2.29), [...]

After hacking /usr/share/perl5/Dpkg/Shlibs/Objdump.pm:462 to read
"defined => ($sect ne '*UND*') && ($sect ne '.bss')"
(maybe not the right solution, just for demonstration):

$ dpkg-shlibdeps ./debian/cppcheck/usr/bin/cppcheck; cat debian/substvars
shlibs:Depends=libc6 (>= 2.32), [...]

(Not really sure about the severity. I believe the resulting bugs in packagage 
using dpkg-shlipdeps are "serious".)

Best regards,
  Joachim

-- Package-specific info:
System tainted due to merged-usr-via-aliased-dirs.

-- System Information:
Debian Release: 11.1
  APT prefers stable-debug
  APT policy: (800, 'stable-debug'), (800, 'stable'), (500, 'stable-security')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-9-amd64 (SMP w/16 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages dpkg-dev depends on:
ii  binutils      2.35.2-2
ii  bzip2         1.0.8-4
ii  libdpkg-perl  1.20.9
ii  make          4.3-4.1
ii  patch         2.7.6-7
ii  perl          5.32.1-4+deb11u2
ii  tar           1.34+dfsg-1
ii  xz-utils      5.2.5-2

Versions of packages dpkg-dev recommends:
ii  build-essential          12.9
ii  clang-11 [c-compiler]    1:11.0.1-2
ii  fakeroot                 1.25.3-1.1
ii  gcc [c-compiler]         4:10.2.1-1
ii  gcc-10 [c-compiler]      10.2.1-6
ii  gnupg                    2.2.27-2
ii  gpgv                     2.2.27-2
ii  libalgorithm-merge-perl  0.08-3

Versions of packages dpkg-dev suggests:
ii  debian-keyring  2021.07.26

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: dpkg
Source-Version: 1.20.12
Done: Guillem Jover <guil...@debian.org>

We believe that the bug you reported is fixed in the latest version of
dpkg, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1000...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Guillem Jover <guil...@debian.org> (supplier of updated dpkg package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Sep 2022 05:38:12 +0200
Source: dpkg
Architecture: source
Version: 1.20.12
Distribution: bullseye
Urgency: medium
Maintainer: Dpkg Developers <debian-d...@lists.debian.org>
Changed-By: Guillem Jover <guil...@debian.org>
Closes: 980963 991190 995387 1000421 1008316 1008478 1008764
Changes:
 dpkg (1.20.12) bullseye; urgency=medium
 .
   [ Guillem Jover ]
   * dpkg: Fix conffile removal-on-upgrade handling. Closes: #995387
   * dpkg: Fix memory leak in remove-on-upgrade handling.
   * dpkg-fsys-usrunmess: Move forced reconfiguration to the last step.
     See #991190.
   * dpkg-fsys-usrunmess: Install a local policy-rc.d to ignore service
     restarts. Closes: #991190
   * dpkg-fsys-usrunmess: Do not fail when removing lingering directories.
   * dpkg-fsys-usrunmess: Fix typo in debug message.
   * dpkg-fsys-usrunmess: Explicitly set user/group and mode for created dirs.
     Closes: #1008478
   * dpkg-fsys-usrunmess: Set a known umask before starting.
     See #1008478.
   * dpkg-fsys-usrunmess: Special case untracked kernel module files.
     Closes: #1008316
   * dpkg-fsys-usrunmess: Handle /lib/modules itself also being untracked.
     Closes: #1008764
   * Architecture support:
     - Add support for ARCv2 CPU.
       Based on a patch by Alexey Brodkin <alexey.brod...@synopsys.com>.
       Closes: #980963
   * Perl modules:
     - Dpkg::Shlibs::Objdump: Fix apply_relocations to work with versioned
       symbols. Closes: #1000421
   * Localization:
     - Fix missing newline in Dutch man pages translation.
Checksums-Sha1:
 bb9cd777963153c712029c1ae9f5b9a01ab0a7a8 2124 dpkg_1.20.12.dsc
 be23ca81df915e7cbf3382e6d2eed605b8dc9065 5009108 dpkg_1.20.12.tar.xz
 5703bcb4bcd726bf48b14eaf594a579ff52c73e0 8013 dpkg_1.20.12_amd64.buildinfo
Checksums-Sha256:
 fe919a7491472bab59362fab8da0c89cf59cd2eea4a8714db58f9f169fc62bf4 2124 
dpkg_1.20.12.dsc
 1428610305d00dffa9c35543fc3096bb1ce3293b53ed4ddad847a3d822eafbf0 5009108 
dpkg_1.20.12.tar.xz
 e07a6834207cefe0a7301a473691c1ab8e3e6008b8d147c5d6fa397dd8860dab 8013 
dpkg_1.20.12_amd64.buildinfo
Files:
 97223cdcafcfabf61ecd2f89a2f2bc50 2124 admin required dpkg_1.20.12.dsc
 985a0caceb5f54bb9bb7eb14c0358c22 5009108 admin required dpkg_1.20.12.tar.xz
 8a5bf2586dab77e89233809cfe420b19 8013 admin required 
dpkg_1.20.12_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=3o6z
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to