Your message dated Wed, 22 Feb 2012 17:32:50 +0000
with message-id <[email protected]>
and subject line Bug#654899: fixed in libarchive-zip-perl 1.30-6
has caused the Debian Bug report #654899,
regarding libarchive-zip-perl: jh_manifest from javahelper creates corrupt
archives (jars)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
654899: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654899
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libarchive-zip-perl
Version: 1.30-3
Severity: important
Tags: upstream
jh_manifest generates corrupt jars using this code:
verbose_print("Updating manifest in $jar");
$zip->removeMember( 'META-INF/MANIFEST.MF' ) unless($new_manifest);
$mem = $zip->addString($var, 'META-INF/MANIFEST.MF');
$mem->desiredCompressionMethod(COMPRESSION_DEFLATED);
# This on the other hand may fail.
$zip->overwrite() == AZ_OK or error("Writing modified jar ($jar) failed$
The member for the directory entry META-INF/ is present and correct in the
original jar, but after the member for the file META-INF/MANIFEST.MF
is added the directory mmeber is corrupt. 3 bytes in the header have
changed:
before jh_manifest is run
0000000 50 4b 03 04 14 00 08 00 08 00 c1 18 26 40 00 00
P K 003 004 024 \0 \b \0 \b \0 301 030 & @ \0 \0
0000020 00 00 00 00 00 00 00 00 00 00 09 00 04 00 4d 45
\0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \t \0 004 \0 M E
0000040 54 41 2d 49 4e 46 2f fe ca 00 00 03 00 50 4b 07
T A - I N F / 376 312 \0 \0 003 \0
Bit flags: 0x08
Compression method: 0x08
Compressed size: 0
Uncompressed size: 0
jar after jh_manifest is run:
0000000 50 4b 03 04 14 00 00 00 00 00 c1 18 26 40 00 00
P K 003 004 024 \0 \0 \0 \0 \0 301 030 & @ \0 \0
0000020 00 00 02 00 00 00 00 00 00 00 09 00 04 00 4d 45
\0 \0 002 \0 \0 \0 \0 \0 \0 \0 \t \0 004 \0 M E
0000040 54 41 2d 49 4e 46 2f fe ca 00 00 50 4b 03 04 0a
T A - I N F / 376 312 \0 \0
Bit flags: 0
Compression method: 0
Compressed size: 2
Uncompressed size: 0
The new compressed size is wrong, and gives this error if unzipped:
$ unzip -t debian/terraintool/usr/share/terraintool/terraintool.jar | head -n 5
Archive: debian/terraintool/usr/share/terraintool/terraintool.jar
META-INF/: ucsize 0 <> csize 2 for STORED entry
continuing with "compressed" size value
testing: META-INF/ bad CRC 1a6cd7b3 (should be 00000000)
testing: mccombe/ OK
This issue looks quite a lot like
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=600848
which points at https://rt.cpan.org/Public/Bug/Display.html?id=54827
but I added that patch and rebuilt/installed libarchive-zip-perl
locally and it didn't fix the problem. It's possible I did something
wrong, but that patch seems definately installed.
I am now in the process of trying the latest release Archive::ZIP 0.31_3
-- System Information:
Debian Release: 6.0.3
APT prefers stable
APT policy: (990, 'stable'), (500, 'oldstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.32.33-kvm-i386-20111128-dirty (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages libarchive-zip-perl depends on:
ii libcompress-raw-zlib-p 2.026-1 low-level interface to zlib compre
ii perl [libcompress-raw- 5.10.1-17squeeze2 Larry Wall's Practical Extraction
libarchive-zip-perl recommends no packages.
libarchive-zip-perl suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: libarchive-zip-perl
Source-Version: 1.30-6
We believe that the bug you reported is fixed in the latest version of
libarchive-zip-perl, which is due to be installed in the Debian FTP archive:
libarchive-zip-perl_1.30-6.debian.tar.gz
to main/liba/libarchive-zip-perl/libarchive-zip-perl_1.30-6.debian.tar.gz
libarchive-zip-perl_1.30-6.dsc
to main/liba/libarchive-zip-perl/libarchive-zip-perl_1.30-6.dsc
libarchive-zip-perl_1.30-6_all.deb
to main/liba/libarchive-zip-perl/libarchive-zip-perl_1.30-6_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
gregor herrmann <[email protected]> (supplier of updated libarchive-zip-perl
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 22 Feb 2012 18:14:36 +0100
Source: libarchive-zip-perl
Binary: libarchive-zip-perl
Architecture: source all
Version: 1.30-6
Distribution: unstable
Urgency: low
Maintainer: Debian Perl Group <[email protected]>
Changed-By: gregor herrmann <[email protected]>
Description:
libarchive-zip-perl - Perl module for manipulation of ZIP archives
Closes: 654899
Changes:
libarchive-zip-perl (1.30-6) unstable; urgency=low
.
* Team upload.
* Add debian/patches/000* to debian/patches/series. Additionally extract
t/data/jar.zip manually from debian/patches/0002-* and add it to
debian/source/include-binaries (quilt silently ignores the binary part
in the patch). Thanks to Niko Tyni (Closes: #654899)
* Add build dependency on unzip and zip, used in the test suite.
* Add patch fix_clean_target.patch to make upstream's clean target work.
Remove override from debian/rules. (Cf. #654901)
Checksums-Sha1:
8d0ab0cad0eb5e219016c394336f27de3f3b53f1 2338 libarchive-zip-perl_1.30-6.dsc
a9e329cdf88c8a023369d31eb1f2820a8ce4569d 8953
libarchive-zip-perl_1.30-6.debian.tar.gz
3c13f84ae68dd6a39a68622fe3a2201e22235b57 97596
libarchive-zip-perl_1.30-6_all.deb
Checksums-Sha256:
b9e99f02a89e8f9145f4da4de6f05576d22b863435f62f84dcd0a61bfe5b0ddd 2338
libarchive-zip-perl_1.30-6.dsc
a5a5e136d25d950d6772428aa35ad6686db889ce1aa58d4898e66f0ba28ed22f 8953
libarchive-zip-perl_1.30-6.debian.tar.gz
926be450d19bbf4160a38876e6dc27b1208df5ff55076421d0b32824cb748eca 97596
libarchive-zip-perl_1.30-6_all.deb
Files:
21a507f652bd5d84cb5281e7a73ea3ce 2338 perl optional
libarchive-zip-perl_1.30-6.dsc
7fb41b881ff5b0e9e34fffaff24374f1 8953 perl optional
libarchive-zip-perl_1.30-6.debian.tar.gz
1ca0806dd02001c18627ebb6d00ce527 97596 perl optional
libarchive-zip-perl_1.30-6_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQIcBAEBCAAGBQJPRSODAAoJELs6aAGGSaoGMlAP+wRbeVVR5GODWLSWGFSXiGK5
0rjztOxcCkRjd2x8PAf6FuLku0aNe+BDlFlHMHNCvT8okGNDQ5Ks692DL4QTQ5Tw
52TFmmK8uDOUUgLJjEz91pRwuNS33ePReSAS6/Hlf+CxoRzm6lUtchqu8rj/jz4+
HUHTpatbGgxYdYofHvaSaSlEm0GXOFTTy7wDY/ds+jGXxnUBVNeNpqWiLS/c9w0t
dz9G/60bqzw7/p0vP0J2aXhS0qS3ksoD+vN4NeW34cx/BzAdJJ+mtpxF33n+ZllW
JvoAMSl/MtTo3RdhDzlbTv9yqnYhfy3IczX4vmb54270mp1/ic+OiXnBgphART2i
TT1dh8r15RaG3ZDpBkbm7AvhtwlqB7ptGhnkDq2tpGI2TWn0TACn0iLKLL585INg
ITdap9Z/FM3uBPFF1II2zS6AE8FaoJOeG15+BRiuyR4+n+lWaSBQuO/2bdjTBBJC
s/ExunpFwGbukzJIFvunfjcfBVGhlwu8wCu/HRIh8q5BpMMBNzSspOlTN9X2ghLg
VRLq7GsvihsVCcaCdh6QkYw5RIbUyy/35Nk2NCXO2gVvWfcsQ+IFMW/7pQpfDkPZ
NL2XtwXA+LnFxWeH0USobikgmUa+1PE15aqObrWhHPfcLyhNZpF5h4RGjlCbm639
4Ul8gI3NChiO6e4F1G1x
=Oxk9
-----END PGP SIGNATURE-----
--- End Message ---
