Your message dated Mon, 24 Oct 2011 00:47:17 +0000
with message-id <[email protected]>
and subject line Bug#646352: fixed in myodbc 5.1.6-3
has caused the Debian Bug report #646352,
regarding myodbc: FTBFS with -Werror=format-security
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
646352: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=646352
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: myodbc
Version: 5.1.6-2
Severity: normal
User: [email protected]
Usertags: hardening-format-security hardening
the package myodbc fails to compile with the new hardened compiler
flags dpkg-buildflag outputs [0].
The problematic flag is: -Werror=format-security
See the ubuntu buildlog:
https://launchpadlibrarian.net/83077578/buildlog_ubuntu-precise-i386.myodbc_5.1.6-2_FAILEDTOBUILD.txt.gz
Snippet:
gcc -DHAVE_CONFIG_H -I. -I../driver -I.. -I../util -D_FORTIFY_SOURCE=2
-I/usr/include -O3 -DDBUG_O
FF -I/usr/include/mysql -DBIG_JOINS=1 -fno-strict-aliasing -DUNIV_LINUX
-DUNIV_LINUX -g -O2 -fstack-
protector --param=ssp-buffer-size=4 -Wformat -Wformat-security
-Werror=format-security -c myodbc3i.c
In file included from ../util/../MYODBC_CONF.h:29:0,
from ../util/installer.h:30,
from myodbc3i.c:40:
...
myodbc3i.c: In function 'main_usage':
myodbc3i.c:146:3: error: format not a string literal and no format
arguments [-Werror=format-security]
The buildflags are not exported in debian, but can be enabled e.g. by
adding this to debian/rules:
DPKG_EXPORT_BUILDFLAGS = 1
include /usr/share/dpkg/buildflags.mk
Please fix the issues and maybe also enable the hardened build in debian.
[0] http://lists.debian.org/debian-devel-announce/2011/09/msg00001.html
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Source: myodbc
Source-Version: 5.1.6-3
We believe that the bug you reported is fixed in the latest version of
myodbc, which is due to be installed in the Debian FTP archive:
libmyodbc_5.1.6-3_amd64.deb
to main/m/myodbc/libmyodbc_5.1.6-3_amd64.deb
myodbc_5.1.6-3.diff.gz
to main/m/myodbc/myodbc_5.1.6-3.diff.gz
myodbc_5.1.6-3.dsc
to main/m/myodbc/myodbc_5.1.6-3.dsc
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Steve Langasek <[email protected]> (supplier of updated myodbc package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 24 Oct 2011 00:30:57 +0000
Source: myodbc
Binary: libmyodbc
Architecture: source amd64
Version: 5.1.6-3
Distribution: unstable
Urgency: low
Maintainer: Steve Langasek <[email protected]>
Changed-By: Steve Langasek <[email protected]>
Description:
libmyodbc - the MySQL ODBC driver
Closes: 646352
Changes:
myodbc (5.1.6-3) unstable; urgency=low
.
* debian/compat: bump to 9, to turn on hardening with dpkg-buildflags.
* installer/myodbc3i.c, dltest/dltest.c: fix lack of format string when
calling fprintf(), so we can build this cleanly with
-Werror=format-security. Closes: #646352.
* Use debian/clean instead of overriding dh_auto_clean
Checksums-Sha1:
f0f7f1f75aba1ff1c66d0811766acfe03da1e0c2 1928 myodbc_5.1.6-3.dsc
0be713c2155619a581ad37693be62afac502a31f 13543 myodbc_5.1.6-3.diff.gz
207374695ae5bf27900f104f808d70d577fb9c69 131494 libmyodbc_5.1.6-3_amd64.deb
Checksums-Sha256:
5f56815359c7dcd5a70bc16cd22d5587066458d991715c5e0d95fe6a58501c7b 1928
myodbc_5.1.6-3.dsc
fcd9f02b35104135b50044fffe4a8347a28d66b70b61f4892d253e6ac8c24936 13543
myodbc_5.1.6-3.diff.gz
1cbe5338afe62e3100164753d25243bb6d59e0f23076ec6a4664ef5277000d15 131494
libmyodbc_5.1.6-3_amd64.deb
Files:
cd1ef3c0e4ec8360130511105c7c194b 1928 libs optional myodbc_5.1.6-3.dsc
21e9a1862e05521efb34efa55fcdba9c 13543 libs optional myodbc_5.1.6-3.diff.gz
be8f2551bf0eeb5f90e70c76aa08b621 131494 libs optional
libmyodbc_5.1.6-3_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)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=OPMN
-----END PGP SIGNATURE-----
--- End Message ---
