Package: sparse
Version: 0.5.0-1+b1
Severity: important

Dear Maintainer,

There's a nasty out-of-bounds array access bug in sparse 0.5.0 that
spews out tons of unwarranted warnings:

./include/linux/err.h:35:16: warning: dereference of noderef expression
./include/linux/err.h:30:23: warning: dereference of noderef expression

when running sparse on the kernel, rendering the packaged sparse
inconvenient if not useless for kernel work.

The fix is in upstream sparse git, but it doesn't look like they make
bugfix releases, nor have they made any release with the fix.

The fix is two upstream commits:

1db3b627dfff ("Handle SForced in storage_modifiers")
9208e04972f2 ("fix mixup in "Handle SForced in storage_modifiers"")

which apply cleanly to 0.5.0.

Please consider carrying the fixes in Debian.


-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (900, 'testing')
Architecture: amd64
 (x86_64)

Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages sparse depends on:
ii  libc6         2.24-10
ii  libgcc1       1:6.3.0-16
ii  libglib2.0-0  2.50.3-2
ii  libgtk2.0-0   2.24.31-2
ii  libstdc++6    6.3.0-16
ii  libtinfo5     6.0+20161126-1
ii  libxml2       2.9.4+dfsg1-2.2
pn  perl:any      <none>

sparse recommends no packages.

sparse suggests no packages.

-- no debconf information

Reply via email to