Bug#868356: dpkg: integer overflow in deb_version_parse()

2017-08-26 Thread Jakub Wilk
This test: if (asprintf(&vs, "%ld.0", (long int)(1L + INT_MAX)) < 0) triggers integer overflow on 32-bit architectures, where int and long have the same width. You probably wanted: if (asprintf(&vs, "%u.0\n", 1U + (unsigned int)INT_MAX)) -- Jakub Wilk

Bug#802241: please store the hash of the installed .deb and allow to query it

2017-08-26 Thread Holger Levsen
hi, while I very much like this idea, please don't store md5sums, but rather sha256sums. Thank you! -- cheers, Holger (wondering why I seem to have to write this in 2017) signature.asc Description: Digital signature

Bug#802241: please store the hash of the installed .deb and allow to query it

2017-08-26 Thread Julian Andres Klode
On Sat, Aug 26, 2017 at 03:16:52PM +0200, Mattia Rizzolo wrote: > On Sat, Aug 26, 2017 at 02:14:16PM +0200, Julian Andres Klode wrote: > > I also want this for delta debs, to identify local rebuilds being > > installed, and prevent delta installation failure in such cases. > > yay another user! >

Bug#802241: please store the hash of the installed .deb and allow to query it

2017-08-26 Thread Mattia Rizzolo
On Sat, Aug 26, 2017 at 02:14:16PM +0200, Julian Andres Klode wrote: > I also want this for delta debs, to identify local rebuilds being > installed, and prevent delta installation failure in such cases. yay another user! > > To me it seems that: > > * we are mostly interested in the hash of the

Bug#802241: please store the hash of the installed .deb and allow to query it

2017-08-26 Thread Julian Andres Klode
On Sun, Oct 18, 2015 at 06:20:01PM +, Mattia Rizzolo wrote: > Package: dpkg > Version: 1.18.3 > Severity: wishlist > X-Debbugs-CC: reproducible-bui...@lists.alioth.debian.org > > Hi dpkg people, > > in the context of allowing to recreate the same build-environment of a > past build we would n

Processed: Bug#870221 in package dpkg marked as pending

2017-08-26 Thread Debian Bug Tracking System
Processing control commands: > tag 870221 pending Bug #870221 [src:dpkg] dpkg: please sort the "unused substitution" warnings Added tag(s) pending. -- 870221: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870221 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Processed: Bug#868356 in package dpkg marked as pending

2017-08-26 Thread Debian Bug Tracking System
Processing control commands: > tag 868356 pending Bug #868356 [src:dpkg] dpkg: integer overflow in deb_version_parse() Added tag(s) pending. -- 868356: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868356 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Processed: Bug#872309 in package dpkg marked as pending

2017-08-26 Thread Debian Bug Tracking System
Processing control commands: > tag 872309 pending Bug #872309 [dpkg] dpkg: Wrong description in /etc/alternatives/README (man page) Added tag(s) pending. -- 872309: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=872309 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems