Your message dated Thu, 29 Dec 2011 22:02:51 +0000
with message-id <e1rgo3n-0002zq...@franck.debian.org>
and subject line Bug#652483: fixed in pythonmagick 0.9.7-2
has caused the Debian Bug report #652483,
regarding pythonmagick: FTBFS with hardening buildflags
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
652483: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652483
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: pythonmagick
Version: 0.9.7-1
Severity: normal
User: debian...@lists.debian.org
Usertags:  hardening

pythonmagick fails to build with the hardening flags applied.
The reason is a missing quote in m4/ax_boost_python.m4:66:
CPPFLAGS=-I$PYTHON_INCLUDE_DIR $CPPFLAGS

this leads to configure not finding the boost python library
checking whether the Boost::Python library is available...
../../configure: line 15885: -D_FORTIFY_SOURCE=2: command not found
no

and a subsequent build failure due to an undefined variable later:
/bin/bash ./libtool --tag=CXX   --mode=link g++  -g -O2
-fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security
-Werror=format-security -DBOOST_PYTHON_DYNAMIC_LIB -avoid-version
-module -L/usr/lib -Wl,-z,relro -o _PythonMagick.la -rpath
/usr/lib/python2.7/dist-packages/PythonMagick
pythonmagick_src/libpymagick.la helpers_src/libhelper.la -L/usr/lib -l
-lMagick++ -lMagickCore
libtool: link: g++  -fPIC -DPIC -shared -nostdlib
/usr/lib/gcc/x86_64-linux-gnu/4.6/../../../x86_64-linux-gnu/crti.o
/usr/lib/gcc/x86_64-linux-gnu/4.6/crtbeginS.o  -Wl,--whole-archive
pythonmagick_src/.libs/libpymagick.a helpers_src/.libs/libhelper.a
-Wl,--no-whole-archive  -L/usr/lib -l /usr/lib/libMagick++.so
/usr/lib/libMagickCore.so -L/usr/lib/gcc/x86_64-linux-gnu/4.6
-L/usr/lib/gcc/x86_64-linux-gnu/4.6/../../../x86_64-linux-gnu
-L/usr/lib/gcc/x86_64-linux-gnu/4.6/../../../../lib
-L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu
-L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/4.6/../../.. -lstdc++
-lm -lc -lgcc_s /usr/lib/gcc/x86_64-linux-gnu/4.6/crtendS.o
/usr/lib/gcc/x86_64-linux-gnu/4.6/../../../x86_64-linux-gnu/crtn.o  -O2
-Wl,-z -Wl,relro   -fopenmp -pthread -Wl,-soname -Wl,_PythonMagick.so -o
.libs/_PythonMagick.so
/usr/bin/ld: cannot find -l/usr/lib/libMagick++.so

note the empty space after -l where boost_python should be.

quoting the CPPFLAGS appears to fix the issue.



The buildflags are not exported in debian, but can be enabled e.g. by
adding this to debian/rules:

 DPKG_EXPORT_BUILDFLAGS = 1
 include /usr/share/dpkg/buildflags.mk

or setting debian/compat to 9

Please fix the issues and maybe also enable the hardened build in debian.

[0] http://lists.debian.org/debian-devel-announce/2011/09/msg00001.html

Attachment: signature.asc
Description: OpenPGP digital signature


--- End Message ---
--- Begin Message ---
Source: pythonmagick
Source-Version: 0.9.7-2

We believe that the bug you reported is fixed in the latest version of
pythonmagick, which is due to be installed in the Debian FTP archive:

python-pythonmagick_0.9.7-2_amd64.deb
  to main/p/pythonmagick/python-pythonmagick_0.9.7-2_amd64.deb
pythonmagick_0.9.7-2.diff.gz
  to main/p/pythonmagick/pythonmagick_0.9.7-2.diff.gz
pythonmagick_0.9.7-2.dsc
  to main/p/pythonmagick/pythonmagick_0.9.7-2.dsc



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 652...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sebastian Ramacher <s.ramac...@gmx.at> (supplier of updated pythonmagick 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Tue, 20 Dec 2011 12:32:16 +0100
Source: pythonmagick
Binary: python-pythonmagick
Architecture: source amd64
Version: 0.9.7-2
Distribution: unstable
Urgency: low
Maintainer: Debian Python Modules Team 
<python-modules-team@lists.alioth.debian.org>
Changed-By: Sebastian Ramacher <s.ramac...@gmx.at>
Description: 
 python-pythonmagick - Object-oriented Python interface to ImageMagick
Closes: 652483
Changes: 
 pythonmagick (0.9.7-2) unstable; urgency=low
 .
   * Team upload.
   * Enable hardened build:
     - debian/patches: add 004_quote_cppflags.diff to fix build issues with
       enabled hardening flags (Closes: #652483).
     - debian/rules: export buildflags.
     - debian/control: add versioned Buil-Dep on dpkg-dev for
       /usr/share/dpkg/buildlflags.mk
   * debian/control: fix spelling error in description.
Checksums-Sha1: 
 49cb35d26dd0fad35af1da8c9662fde0b2de059c 1560 pythonmagick_0.9.7-2.dsc
 8688d4c4cf8b7ad14bf88f390ecc9133ffaa7690 9781 pythonmagick_0.9.7-2.diff.gz
 1a1d1b1efc9df0df219eabb0df2f336cc655b0a5 1050928 
python-pythonmagick_0.9.7-2_amd64.deb
Checksums-Sha256: 
 5d1ba62798174781a66743a5b07fbabd9848d8eec642d0f7b222a05b8a908a95 1560 
pythonmagick_0.9.7-2.dsc
 341ccd12cad4c3c418e5a58dd9922bdd18df2694bbd88f615c84a683456425ac 9781 
pythonmagick_0.9.7-2.diff.gz
 8edbc81d1c46125c0579740e94e0fc1bfbe363f85548cbc9ffad3d852170bc47 1050928 
python-pythonmagick_0.9.7-2_amd64.deb
Files: 
 91216447582cd16e9957040a0b60f873 1560 python extra pythonmagick_0.9.7-2.dsc
 6e9192c9fedd87cf6734e69863013147 9781 python extra pythonmagick_0.9.7-2.diff.gz
 c9734b531e3d5274174dbf3d5da44ccb 1050928 python extra 
python-pythonmagick_0.9.7-2_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk784F4ACgkQx/UhwSKygsrSxwCfRrBWWHOHOjKMGkmZ4IIUBgRw
p7MAoIzjjaZhYgMhOTG1ufasZYn9vCgH
=xnP5
-----END PGP SIGNATURE-----



--- End Message ---
_______________________________________________
Python-modules-team mailing list
Python-modules-team@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team

Reply via email to