[Bug 1786489] Re: [MIR] rygel

2019-09-16 Thread Sebastien Bacher
** Changed in: rygel (Ubuntu)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2019-09-11 Thread Didier Roche
+1 on the MIR side

** Changed in: rygel (Ubuntu)
   Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2019-08-29 Thread Sebastien Bacher
Sorry, it was a leftover recommends on gstreamer libav, downgraded to a
suggests now

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2019-08-28 Thread Matthias Klose
see 
https://people.canonical.com/~ubuntu-archive/component-mismatches-proposed.svg
rygel tries to pull in 30+ other packages into main.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2019-08-28 Thread Didier Roche
** Changed in: rygel (Ubuntu)
   Status: Triaged => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2019-08-28 Thread Didier Roche
Now that all remarks have been addressed, I'm happy to give an official
+1 from the MIR team side.

** Changed in: rygel (Ubuntu)
   Status: New => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2019-08-22 Thread Sebastien Bacher
The Rygel recommends on gst-plugins-ugly has been lowered to a suggest,
the review problems have been upstreamed and upstream acked the NOENT
issue here. Sending back to the MIR team, we will backport the NOENT fix
but otherwise I think it should be good to be acked on the MIR side now

** Changed in: rygel (Ubuntu)
 Assignee: Ubuntu Desktop (ubuntu-desktop) => (unassigned)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2019-08-20 Thread Jens Georg
Actually I completely mis-understood NOENT - it does the exact opposite
of what I thought it does ...

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2019-08-20 Thread Mathieu Trudel-Lapierre
Current state appears to be that Desktop Team should look into the
Recommends (gstreamer plugins-ugly), and someone have a review of the
XML parser options (as pointed out in the security review, specifically
for NOENT and RECOVER... maybe NONET should be added?).

** Changed in: rygel (Ubuntu)
 Assignee: (unassigned) => Ubuntu Desktop (ubuntu-desktop)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2019-08-14 Thread Sebastien Bacher
@Jens, yes I plan to do that (thanks for keeping an eye on launchpad btw
;-)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2019-08-14 Thread Jens Georg
Are you going to file upstream tickets for the relevant findings?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2019-08-14 Thread Chris Coulson
I reviewed rygel 0.36.2-5ubuntu1 as checked in to eoan. This isn't a
full security audit, but rather a quick gauge of maintainability.

- rygel is a UPnP AV media server, allowing audio and video to be shared with 
other devices. It can also operate as a media renderer which can be controlled 
by UPnP controllers.
- rygel is part of the GNOME project.
- rygel is written in vala.
- The website claims it us under active development, but activity seems to have 
slowed somewhat this year - since February, the only git commits are mostly 
translation updates and what look like minor build / bug fixes.
- Of the 118 issues currently open in gitlab, many of them appear to have been 
originally imported from Bugzilla and haven't had much activity since the 
migration.
- No CVEs in our database.
- Build dependencies in main, except for:
  - libgssdp-1.2-dev (bug 1799977)
  - libgupnp-1.2-dev, libgupnp-av-1.0-dev, libgupnp-dlna-2.0-dev (bug 1799974)
  - valac (this doesn't create any binary package dependencies)
- The rygel binary package recommends gstreamer1.0-plugins-ugly, which is in 
universe.

- I ran coverity, although this mostly highlights problems in C code that is 
auto-generated by valac.
- Coverity shows up quite a few unreachable code issues, like this one in 
rygel_base_configuration_real_get_interface:
...
g_propagate_error (error, _inner_error0_);
return NULL;
return result;
}

And also rygel_basic_management_test_real_run_co:
...
}
g_object_unref (_data_->_async_result);
return FALSE;
g_task_return_pointer (_data_->_async_result, _data_, NULL);
if (_data_->_state_ != 0) {
while (!_data_->_task_complete_) {
...

These look like vala bugs.

- There's a fd leak in rygel_energy_management_get_mac_and_network_type if fd 
== 0. I'm not sure if this is a real issue - it's only possible to hit this 
condition if stdin is closed.
- Coverity catches what looks like an obvious null deref here in 
rygel_ruih_service_manager_real_constructed in the second call to 
block1_data_unref:
...
if (G_UNLIKELY (_inner_error0_ != NULL)) {
_g_object_unref0 (config_dir_file);
block1_data_unref (_data1_);
_data1_ = NULL;
if (_inner_error0_->domain == RYGEL_RUIH_SERVICE_ERROR) {
goto __catch2_rygel_ruih_service_error;
}
if (_inner_error0_->domain == G_IO_ERROR) {
goto __catch2_g_io_error;
}
_g_object_unref0 (config_dir_file);
block1_data_unref (_data1_);
_data1_ = NULL;
_g_free0 (ui_listing_directory);
g_critical ("file %s: line %d: unexpected error: %s (%s, %d)", 
__FILE__, __LINE__, _inner_error0_->message, g_quark_to_string 
(_inner_error0_->domain), _inner_error0_->code);
g_clear_error (&_inner_error0_);
return;
}
...

I'm not sure if this is actually a vala bug though.

- Rygel.SimpleDataSource.run uses lseek without checking the return value.
- The uint.clamp() call in Rygel.External.Container constuctor generates C code 
that does a negative unsigned compare. Would "uint.min(child_count, int.MAX)" 
be more appropriate than "child_count.clamp(0, int.MAX)" ?
- Rygel.MediaExport.DVDContainer.constructed parses XML with options that are 
vulnerable to External Entity injection, specifically Xml.ParserOptions.NOENT. 
See https://cwe.mitre.org/data/definitions/611.html for more context.
  - Use of Xml.ParserOptions.RECOVER also triggers another defect in coverity. 
These issues may be repeated in other locations.
- Rygel.Tracker.Titles.create_title_for_value performs a negative unsigned 
compare when checking the result of get_char_validated, and produces C code 
that always evaluates false and could be optimised away. "if (unlikely (c == 
-2)) {" (which I think would expand to the C code "if (G_UNLIKELY (c == 
((gunichar) -2))) {") might be more correct.

- Most of the code is written in vala, which compiles to intermediate C code 
and handles memory management (eg freeing and checking whether allocations are 
successful) transparently, as long as the memory management GIR annotations are 
correct. Memory management is performed via glib + gobject APIs (g_new0, 
g_object_new, g_string_new etc).
- Works with files, using glib's GFile API's (at least, in the gst media engine 
and media-export plugin).
- Limited logging using g_debug (not logged by default) and g_message, which go 
to the user's journal. There doesn't appear to be anything sensitive logged.
- Allows environment variables to override configuration file options.
- No privileged code.
- Doesn't use temporary files.
- No privileged commands.
- No webkit.
- Processes local media files using gstreamer.
- Build logs look ok - just one compiler warning in the build:

CDPATH="${ZSH_VERSION+.}:" && cd . && /usr/bin/valac -H rygel-renderer-gst.h 
--library=rygel-renderer-gst-2.6 --gir=Rygel-2.6.gir 

[Bug 1786489] Re: [MIR] rygel

2019-03-05 Thread Sebastien Bacher
The multi-arching is done now (and synced to disco)

We discussed the autopkgtest rebuild thing on IRC and decided that it
was probably best serve to have vala itself including the rebuild of
some packages in its tests, and then use a ppa to test rebuild things
with new versions before upload

** Changed in: rygel (Ubuntu)
 Assignee: (unassigned) => Ubuntu Security Team (ubuntu-security)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2019-02-12 Thread Didier Roche
** Changed in: rygel (Ubuntu)
 Assignee: Didier Roche (didrocks) => (unassigned)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2018-12-07 Thread Didier Roche
Ok, so to sum up, remaining work to do:
- Add multi-arch to the libs
- (optional) Run as autopkgtests to ensure vala doesn't break this build

Once the above is addressed (multi-arch), +1 from the MIR team.
I think the security team can start right now reviewing this package and the 
rdepends.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2018-12-05 Thread Sebastien Bacher
** Description changed:

  * Availability
  
  Builds on all supported architectures in Ubuntu and on sync from Debian
  
  * Rationale
  
  We would like to enable dlna sharing of media files, which is a GNOME
- upstream feature and relying on rygel
+ upstream feature and relying on rygel.
+ 
+ The binaries to promoted would be
+ librygel-core-2.6-2
+ librygel-db-2.6-2
+ librygel-renderer-2.6-2
+ librygel-server-2.6-2
+ rygel
  
  * Security
  
  No CVE/known security issue
  
  * Quality assurance
  
  - the desktop-packages team is subscribed to the package
  - upstream has a testsuit which is not being used during build, we are going 
to look at changing that
  
  * Dependendies
  
  The package requires gupnp-dlna (MIR bug #1785649) and gupnp-av (MIR bug
  #1785629). gupnp was in main but was demoted since (bug #1799974 in case
  a new review is needed), same for gssdp (bug #1799977)
  
  * Standards compliance
  
  the package is using standard packaging (dh11), the standards-version is
  4.1.1, the package is in sync from Debian
  
  * Maintainance
  
  Upstream is active and the desktop team is going to look after the
  package in ubuntu

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2018-12-03 Thread Jeremy Bicha
** Changed in: rygel (Ubuntu)
   Status: Fix Released => New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2018-12-03 Thread Launchpad Bug Tracker
This bug was fixed in the package rygel - 0.36.2-2

---
rygel (0.36.2-2) unstable; urgency=medium

  * Some tweaks following the Ubuntu MIR reviews (lp: #1786489)
  * debian/copyright: updated the list of copyright owners
  * debian/rygel.triggers: use noawait triggers

 -- Sebastien Bacher   Mon, 03 Dec 2018 16:36:28
+0100

** Changed in: rygel (Ubuntu)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2018-12-03 Thread Sebastien Bacher
> * There are a lot of crash reports in launchpad. Those are several years old 
> and shouldn't apply anymore. 
> Maybe a little bit of cleanup of really old one, and looking at more recent 
> ones will help once supported 
> to review real new crashes (between launchpad and errors.ubuntu.com)?

Done, the launchpad bugs are down to 7 & e.u.c is looks without real
issues.


> * What is going to pull rygel on the iso: directly seeded or a 
> recommends/deps somewhere? 
> Note that there is as well rygel-tracker which shouldn't be promoted until 
> tracker situation is deciphered.

gnome-control-center has the sharing UI, we plan to add the Recommends
to the service there


> * Some lintian warnings would be great to looked at, namely:
> - W: rygel-2.6-dev: pkg-config-unavailable-for-cross-compilation (multiple of 
> thm)

That's because the package is not using a multiarch location, do you
consider that a pre-requirement to get the MIR approved? It's probably
not too difficult to change the build but it requires some testing, etc.


> - W: rygel: uses-implicit-await-trigger interest /usr/lib/rygel-2.6 (line 1)
> - W: rygel: uses-implicit-await-trigger interest rygel-restart (line 2)

Fixed in 0.36.2-2 just uploaded to Debian (autosync to come)


> * I guess rygel-preferences isn't going to be promoted, correct? 
> (maybe we should list exactly the packages that are going to be promoted). It 
> has a dep as linking on libgssdp-1.0-3, which is in universe.

Correct, gnome-control-center is the UI to control the service in our
usecase


> * However rygel binary package has some dep issues as well:
>  - dep on libgssdp-1.0-3 (gssdp source in universe) and libgupnp-1.0-4 (gupnp 
> source in universe), which are not listed in the current MIR for the stack.

Right, those used to be in main but new MIRs filed now to have a new look 
before re-promoting
https://bugs.launchpad.net/ubuntu/+source/gupnp/+bug/1799974
https://bugs.launchpad.net/ubuntu/+source/gssdp/+bug/1799977


> - 2 recommends with its source in universe and not listed to be MIRed. 
> They should be downgraded to Suggests, if possible: gstreamer1.0-libav and 
> gstreamer1.0-plugins-ugly

Right, those needs to be demoted but let's keep the package in sync for
now it's going to lower the work until the other MIRs and this one are
approved.


> * If we want to promote rygel-2.6-dev to main, there is again the 
> libgupnp-1.0-dev dep as well which needs to be sorted out.

I don't think we need the -dev in main since we can build on universe.
Also gupnp has a MIR in review.


> * librygel-server-2.6-2 is a dep of rygel, and depends as well on 
> libgssdp-1.0-3 and libgupnp-1.0-4
> * librygel-renderer-2.6-2 is a dep of rygel, and depends as well on 
> libgupnp-1.0-4
> * librygel-core-2.6-2 is a dep of rygel, and depends as well on 
> libgssdp-1.0-3 and libgupnp-1.0-4

Right, those 2 MIRs are pre-requirements now


> * some copyright are missing:
>  - 2008-2009 Florian Brosch
>  - 2012 Choe Hwanjin 
>  - 2013 Cable Television Laboratories, Inc.
>  - 2014 Jens Georg 
>  - 2014 Atlantic PuffinPack AB.
>  - 2017 Samuel CUELLA]
>  - Intel Corporation copyright should be extended to 2013
>  - Jens Georg copyright should be extended to 2016
> I may have missed others but that should be about it.

Thanks for listing those, I had a look and I think your list looks good,
I updated it in 0.36.2-2


> Opened question:
> - tests are ran during package build, do we want autopkgtests (unsure if 
> those are just unit tests or not, but it would maybe prevent at least vala 
> regression)?

The test just exercice the code indeed, no integration test, so not
really useful as autopkgtest by themself. You have a good point about
vala though, let's have a look at adding them then.


> - the doc is in the -dev package. That's ok with me, weird to have different 
> standards considering debian maintainer is the same than the other packages 
> though.

Right, a bit weird but probably not worth pushing for that change.


> I think there is a bunch of work to be done before going to another review or 
> give a conditional +1 on that one. I'll defer also to the security team once 
> the package is a little bit more ready from the pure MIR perspective.

Security team has been adding the review to their backlog but they would
prefer for the MIR team to state that it's likely to be ok from a MIR
perspective before starting, hopfully with the uploaded tweaks and the
replies we are good for bouncing to them while we sort out the
multiarch/pkgconfig & autopkgtest questions?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2018-10-25 Thread Sebastien Bacher
** Description changed:

  * Availability
  
  Builds on all supported architectures in Ubuntu and on sync from Debian
  
  * Rationale
  
  We would like to enable dlna sharing of media files, which is a GNOME
  upstream feature and relying on rygel
  
  * Security
  
  No CVE/known security issue
  
  * Quality assurance
  
  - the desktop-packages team is subscribed to the package
  - upstream has a testsuit which is not being used during build, we are going 
to look at changing that
  
  * Dependendies
  
  The package requires gupnp-dlna (MIR bug #1785649) and gupnp-av (MIR bug
- #1785629)
+ #1785629). gupnp was in main but was demoted since (bug #1799974 in case
+ a new review is needed), same for gssdp (bug #1799977)
  
  * Standards compliance
  
  the package is using standard packaging (dh11), the standards-version is
  4.1.1, the package is in sync from Debian
  
  * Maintainance
  
  Upstream is active and the desktop team is going to look after the
  package in ubuntu

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2018-10-25 Thread Didier Roche
* There are a lot of crash reports in launchpad. Those are several years old 
and shouldn't apply anymore. Maybe a little bit of cleanup of really old one, 
and looking at more recent ones will help once supported to review real new 
crashes (between launchpad and errors.ubuntu.com)?
* What is going to pull rygel on the iso: directly seeded or a recommends/deps 
somewhere? Note that there is as well rygel-tracker which shouldn't be promoted 
until tracker situation is deciphered.
* Some lintian warnings would be great to looked at, namely:
- W: rygel-2.6-dev: pkg-config-unavailable-for-cross-compilation (multiple of 
thm)
- W: rygel: uses-implicit-await-trigger interest /usr/lib/rygel-2.6 (line 1)
- W: rygel: uses-implicit-await-trigger interest rygel-restart (line 2)
* I guess rygel-preferences isn't going to be promoted, correct? (maybe we 
should list exactly the packages that are going to be promoted). It has a dep 
as linking on libgssdp-1.0-3, which is in universe.
* However rygel binary package has some dep issues as well:
 - dep on libgssdp-1.0-3 (gssdp source in universe) and libgupnp-1.0-4 (gupnp 
source in universe), which are not listed in the current MIR for the stack.
 - 2 recommends with its source in universe and not listed to be MIRed. They 
should be downgraded to Suggests, if possible: gstreamer1.0-libav and 
gstreamer1.0-plugins-ugly
* If we want to promote rygel-2.6-dev to main, there is again the 
libgupnp-1.0-dev dep as well which needs to be sorted out.
* librygel-server-2.6-2 is a dep of rygel, and depends as well on 
libgssdp-1.0-3 and libgupnp-1.0-4
* librygel-renderer-2.6-2 is a dep of rygel, and depends as well on 
libgupnp-1.0-4
* librygel-core-2.6-2 is a dep of rygel, and depends as well on libgssdp-1.0-3 
and libgupnp-1.0-4
* some copyright are missing:
  - 2008-2009 Florian Brosch
  - 2012 Choe Hwanjin 
  - 2013 Cable Television Laboratories, Inc.
  - 2014 Jens Georg 
  - 2014 Atlantic PuffinPack AB. 
  - 2017 Samuel CUELLA]
  - Intel Corporation copyright should be extended to 2013
  - Jens Georg copyright should be extended to 2016
I may have missed others but that should be about it.

Opened question:
- tests are ran during package build, do we want autopkgtests (unsure if those 
are just unit tests or not, but it would maybe prevent at least vala 
regression)?
- the doc is in the -dev package. That's ok with me, weird to have different 
standards considering debian maintainer is the same than the other packages 
though.

I think there is a bunch of work to be done before going to another
review or give a conditional +1 on that one. I'll defer also to the
security team once the package is a little bit more ready from the pure
MIR perspective.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2018-09-13 Thread Matthias Klose
** Changed in: rygel (Ubuntu)
 Assignee: (unassigned) => Didier Roche (didrocks)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2018-08-14 Thread Sebastien Bacher
** Changed in: rygel (Ubuntu)
   Status: Confirmed => New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1786489] Re: [MIR] rygel

2018-08-13 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: rygel (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786489

Title:
  [MIR] rygel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rygel/+bug/1786489/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs