Source: minilla Version: 3.1.11-1 Severity: serious Tags: ftbfs Justification: fails to build from source
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 As also seen on ci.debian.net, minilla recently started to fail its test suite, which also makes it FTBFS: # Failed test 'No tests run for subtest "FileGatherer"' # at t/filegatherer.t line 46. Minilla::Error::CommandExit at /build/minilla-3.1.19/blib/lib/Minilla/Logger.pm line 56. Minilla::Logger::errorf("Giving up.\x{a}") called at /build/minilla-3.1.19/blib/lib/Minilla/Util.pm line 150 Minilla::Util::cmd("git", "submodule", "add", "file:///tmp/cNMz9BGy3K", "libfoo") called at /build/minilla-3.1.19/blib/lib/Minilla/Git.pm line 43 Minilla::Git::git_submodule_add("file:///tmp/cNMz9BGy3K", "libfoo") called at t/filegatherer.t line 70 main::init() called at t/filegatherer.t line 17 main::__ANON__() called at /usr/share/perl/5.36/Test/Builder.pm line 374 eval {...} called at /usr/share/perl/5.36/Test/Builder.pm line 374 Test::Builder::subtest(Test::Builder=HASH(0x55b66779e4c0), "FileGatherer", CODE(0x55b667d4a8a0)) called at /usr/share/perl/5.36/Test/More.pm line 809 Test::More::subtest("FileGatherer", CODE(0x55b667d4a8a0)) called at t/filegatherer.t line 46 # Tests were run but no plan was declared and done_testing() was not seen. # Looks like your test exited with 255 just after 2. t/filegatherer.t ............................. ok 1 - Minilla::FileGatherer->can('new') # Subtest: FileGatherer [cNMz9BGy3K] $ git init Initialized empty Git repository in /tmp/cNMz9BGy3K/.git/ [cNMz9BGy3K] $ git add . [cNMz9BGy3K] $ git commit -m submodule [main (root-commit) 928d506] submodule 1 file changed, 1 insertion(+) create mode 100644 foo.c [1X4gcCt02H] $ git init Initialized empty Git repository in /tmp/1X4gcCt02H/.git/ [1X4gcCt02H] $ git add . [1X4gcCt02H] $ git commit -m submodule [main (root-commit) fcf8e7d] submodule 1 file changed, 1 insertion(+) create mode 100644 bar.c [75BXf3LiVD] $ git init Initialized empty Git repository in /tmp/75BXf3LiVD/.git/ [75BXf3LiVD] $ git add . [75BXf3LiVD] $ git submodule add file:///tmp/cNMz9BGy3K libfoo 1..0 not ok 2 - No tests run for subtest "FileGatherer" Dubious, test returned 255 (wstat 65280, 0xff00) Failed 1/2 subtests Cloning into '/tmp/t_vUmqA512/libbar'... fatal: transport 'file' not allowed fatal: clone of 'file:///tmp/VnuWv09juk' into submodule path '/tmp/t_vUmqA512/libbar' failed Giving up. # No tests run! # Failed test 'No tests run for subtest "FileGatherer"' # at t/filegatherer/submodules-recursive.t line 46. Minilla::Error::CommandExit at /build/minilla-3.1.19/blib/lib/Minilla/Logger.pm line 56. Minilla::Logger::errorf("Giving up.\x{a}") called at /build/minilla-3.1.19/blib/lib/Minilla/Util.pm line 150 Minilla::Util::cmd("git", "submodule", "add", "file:///tmp/VnuWv09juk", "libbar") called at /build/minilla-3.1.19/blib/lib/Minilla/Git.pm line 43 Minilla::Git::git_submodule_add("file:///tmp/VnuWv09juk", "libbar") called at t/filegatherer/submodules-recursive.t line 86 main::create_deep_submodule_repo("foo") called at t/filegatherer/submodules-recursive.t line 52 main::init() called at t/filegatherer/submodules-recursive.t line 17 main::__ANON__() called at /usr/share/perl/5.36/Test/Builder.pm line 374 eval {...} called at /usr/share/perl/5.36/Test/Builder.pm line 374 Test::Builder::subtest(Test::Builder=HASH(0x55c165f41840), "FileGatherer", CODE(0x55c166599dd0)) called at /usr/share/perl/5.36/Test/More.pm line 809 Test::More::subtest("FileGatherer", CODE(0x55c166599dd0)) called at t/filegatherer/submodules-recursive.t line 46 # Tests were run but no plan was declared and done_testing() was not seen. # Looks like your test exited with 255 just after 2. t/filegatherer/submodules-recursive.t ........ ok 1 - Minilla::FileGatherer->can('new') # Subtest: FileGatherer [t_vUmqA512] $ git init Initialized empty Git repository in /tmp/t_vUmqA512/.git/ [t_vUmqA512] $ git add . [t_vUmqA512] $ git commit -m submodule [main (root-commit) 4dc9adf] submodule 1 file changed, 1 insertion(+) create mode 100644 foo.c [eq_ln5HmOW] $ git init Initialized empty Git repository in /tmp/eq_ln5HmOW/.git/ [eq_ln5HmOW] $ git add . [eq_ln5HmOW] $ git commit -m submodule [main (root-commit) 4dc9adf] submodule 1 file changed, 1 insertion(+) create mode 100644 foo.c [VnuWv09juk] $ git init Initialized empty Git repository in /tmp/VnuWv09juk/.git/ [VnuWv09juk] $ git add . [VnuWv09juk] $ git commit -m submodule [main (root-commit) 9290497] submodule 1 file changed, 1 insertion(+) create mode 100644 bar.c [t_vUmqA512] $ git add . [t_vUmqA512] $ git submodule add file:///tmp/VnuWv09juk libbar 1..0 not ok 2 - No tests run for subtest "FileGatherer" Dubious, test returned 255 (wstat 65280, 0xff00) Failed 1/2 subtests # Failed test 'No tests run for subtest "project_in_submodule"' # at t/project/in_submodule.t line 74. Minilla::Error::CommandExit at /build/minilla-3.1.19/blib/lib/Minilla/Logger.pm line 56, <DATA> line 258. Minilla::Logger::errorf("Giving up.\x{a}") called at /build/minilla-3.1.19/blib/lib/Minilla/Util.pm line 150 Minilla::Util::cmd("git", "submodule", "add", "../sub") called at /build/minilla-3.1.19/blib/lib/Minilla/Git.pm line 43 Minilla::Git::git_submodule_add("../sub") called at t/project/in_submodule.t line 65 main::__ANON__() called at /usr/share/perl/5.36/Test/Builder.pm line 374 eval {...} called at /usr/share/perl/5.36/Test/Builder.pm line 374 Test::Builder::subtest(Test::Builder=HASH(0x55d77e0444b0), "project_in_submodule", CODE(0x55d77e9b3b98)) called at /usr/share/perl/5.36/Test/More.pm line 809 Test::More::subtest("project_in_submodule", CODE(0x55d77e9b3b98)) called at t/project/in_submodule.t line 74 # Tests were run but no plan was declared and done_testing() was not seen. # Looks like your test exited with 255 just after 1. t/project/in_submodule.t ..................... # Subtest: project_in_submodule Writing lib/Acme/Foo.pm Writing Changes Writing t/00_compile.t Writing .github/workflows/test.yml Writing .gitignore Writing LICENSE Writing cpanfile [sub] $ git init Initialized empty Git repository in /tmp/f5JX1kyPZA/sub/.git/ [sub] $ git add . [sub] $ git commit -m initial import [main (root-commit) 7baf193] initial import 9 files changed, 530 insertions(+) create mode 100644 .github/workflows/test.yml create mode 100644 .gitignore create mode 100644 Changes create mode 100644 LICENSE create mode 100644 cpanfile create mode 100644 lib/Acme/Foo.pm create mode 100644 lib/Acme/Foo.pod create mode 100644 minil.toml create mode 100644 t/00_compile.t [main] $ git init Initialized empty Git repository in /tmp/f5JX1kyPZA/main/.git/ [main] $ git submodule add ../sub 1..0 not ok 1 - No tests run for subtest "project_in_submodule" Dubious, test returned 255 (wstat 65280, 0xff00) Failed 1/1 subtests Test Summary Report - ------------------- t/filegatherer.t (Wstat: 65280 (exited 255) Tests: 2 Failed: 1) Failed test: 2 Non-zero exit status: 255 Parse errors: No plan found in TAP output t/filegatherer/submodules-recursive.t (Wstat: 65280 (exited 255) Tests: 2 Failed: 1) Failed test: 2 Non-zero exit status: 255 Parse errors: No plan found in TAP output t/project/in_submodule.t (Wstat: 65280 (exited 255) Tests: 1 Failed: 1) Failed test: 1 Non-zero exit status: 255 Parse errors: No plan found in TAP output This may or may not be related to recent changes in git: git (1:2.38.1-1) unstable; urgency=medium * new upstream release (closes: #1022046; see RelNotes/2.38.0.txt, RelNotes/2.38.1.txt). * Addresses the security issue CVE-2022-39253: cloning an attacker-controlled local repository could store arbitrary files in the ".git" directory of the destination repository. Thanks to Cory Snider of Mirantis for reporting this vulnerability and Taylor Blau for the mitigation. * Addresses CVE-2022-39260: a long command string passed to a `git shell` configured to support custom commands could overflow and run arbitrary code. Thanks to Kevin Backhouse of GitHub for reporting this vulnerability and Kevin Backhouse, Jeff King, and Taylor Blau for mitigating it. Cheers, gregor -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmNkGNZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgbPDQ/8DPvo+d7T9jpSUd/dOZFf13oPVBBjF1lgm4ukWIi2PAaqMZoZtgMVxHOL XnUjdFtn7gqlI6iuOzkyTZsOIOGq7BeydU4vKsBo3ILzY+IYYFruPhVnXDx2qUTy H+0jcxFVUhsmFanJ8xOBW8sANsVIvA5OawtSW0qMP8jdqwfmXvIufVGfIomqTdoK FAFrqqNO+39wrdx/SIMUYZE22Iit8j510O6kC5UvgzjsBnWwN3Ei/aOkCZ6nXYbr JkSsYG6OQa9UCaFiYkHxxna8J011oHXuaP3kHt6sGitarh7HbKzUYBTTmzulz/Kj JqQvQiwzw7prrVdfw37JmT3KgpkYFwROi7aECZQeFTWlL2jmVNhMOLvC39CHgb8x NPkulHtBHo3+hZ0YSBTXQW2+WU/37Ja64h8md/KEc9zzGoKGjLcFLJWU+DGwxuPk tWtLWvElWht/WSlfdZW4PWNkSuzzHVbvNLOMRoJcjrAAzoJCTZYegy6ngXVxK99z 6E34FJVOBdBEjaGPa0Q/zTTizQ+aJj8Z1cQ4Okfsc6qrfm3yRGsZ0vSTdrzb2Th0 nad3T61oL5CFabZUd6BWud1488mhGQ5G16iaWy66seqbFZJYfzxA6TftrX5Hp2dE yKtVgWTnsbB/0giVIZ9uSLQbZ6ogrcRgyennCg9XmckfZyqzD2s= =7XyD -----END PGP SIGNATURE-----