Package: release.debian.org Severity: normal User: release.debian....@packages.debian.org Usertags: unblock
Please unblock package gccintro Just typo-fixes and clarification of difference from upstream. unblock gccintro/1.0-2 -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (10, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.5-trunk-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash
diff -Nru gccintro-1.0/debian/changelog gccintro-1.0/debian/changelog --- gccintro-1.0/debian/changelog 2012-07-16 17:18:15.000000000 +0900 +++ gccintro-1.0/debian/changelog 2012-08-18 20:36:46.000000000 +0900 @@ -1,3 +1,10 @@ +gccintro (1.0-2) unstable; urgency=low + + * Fix spell errors. + * Describe changes made to the upstream more accurately. + + -- Osamu Aoki <os...@debian.org> Sat, 18 Aug 2012 20:32:58 +0900 + gccintro (1.0-1) unstable; urgency=low * Initial release (Closes: #681725) diff -Nru gccintro-1.0/debian/patches/0002-Update-contents-for-Debian.patch gccintro-1.0/debian/patches/0002-Update-contents-for-Debian.patch --- gccintro-1.0/debian/patches/0002-Update-contents-for-Debian.patch 2012-07-16 17:18:07.000000000 +0900 +++ gccintro-1.0/debian/patches/0002-Update-contents-for-Debian.patch 2012-08-18 20:22:07.000000000 +0900 @@ -1,4 +1,4 @@ -From fa6d91492feb455dca740ffb851aec28b4947713 Mon Sep 17 00:00:00 2001 +From 306e2fd31d176bc0840321a1286a7ca2a5cf3d62 Mon Sep 17 00:00:00 2001 From: Osamu Aoki <os...@debian.org> Date: Sat, 14 Jul 2012 01:58:12 +0900 Subject: [PATCH 2/3] Update contents for Debian @@ -69,7 +69,7 @@ +} + diff --git a/gccintro.texi b/gccintro.texi -index bfa0a60..ed84052 100644 +index bfa0a60..4148e38 100644 --- a/gccintro.texi +++ b/gccintro.texi @@ -103,6 +103,7 @@ published by Network Theory Ltd raise money for more free documentation. @@ -161,24 +161,24 @@ +@cindex uncontrolled format string +The possible security vulnerability of uncontrolled format +string@footnote{@uref{http://en.wikipedia.org/wiki/Uncontrolled_format_string}} -+in @code{printf()} and similars can be detected and warned with GCC using the ++in @code{printf()} and the similar functions can be detected and warned with GCC using the +option @option{-Wformat -Wformat-security}. + -+Example of unsecure code: @file{format.c} ++Example of insecure code: @file{format.c} + +@example +@verbatiminclude format.c +@end example +@noindent + -+The unsecure program @file{format.c} can be compiled without obvious warnings. ++The insecure program @file{format.c} can be compiled without obvious warnings. + +@example +$ gcc -Wall format.c +@end example +@noindent + -+The unsecure program @file{format.c} can be compiled with the option ++The insecure program @file{format.c} can be compiled with the option +@option{-Wformat -Wformat-security} with warnings. + +@example @@ -211,14 +211,14 @@ +vulnerability in the program, the application will be killed immediately. This +reduces the risk of any unknown potential exploits to a denial-of-service. + -+Example of unsecure code: @file{bof.c} ++Example of insecure code: @file{bof.c} + +@example +@verbatiminclude bof.c +@end example +@noindent + -+The unsecure program @file{bof.c} can be compiled without obvious warnings. ++The insecure program @file{bof.c} can be compiled without obvious warnings. + +@example +$ gcc -Wall bof.c -o bof @@ -230,9 +230,9 @@ + +The output shows that the @file{bof.c} program compiled without using +the option @option{-fstack-protector} creates an executable @file{bof} which -+executes an unsecure buffer overflow code silently. ++executes an insecure buffer overflow code silently. + -+The unsecure program @file{bof.c} can be compiled with the option ++The insecure program @file{bof.c} can be compiled with the option +@option{-fstack-protector}. + +@example @@ -249,7 +249,7 @@ + +The output shows that the @file{bof.c} program compiled with the option +@option{-fstack-protector} creates an executable @file{bof-ssp}. When the -+executable @file{bof-ssp} executed, it detacts stack smashing and exit safely. ++executable @file{bof-ssp} is executed, it detects stack smashing and exits safely. + +@node Buffer overflow protection +@section Buffer overflow protection @@ -261,11 +261,11 @@ +The GCC macro definition of @option{-D_FORTIFY_SOURCE} provides a lightweight +buffer overflow protection to some memory and string functions provided by the +GLIBC. This feature uses macro substitution of such vulnerable functions to -+prevent an unsecure buffer overflow code to be excuted. The compilar ++prevent an insecure buffer overflow code to be executed. The compiler +optimization option needs to be @option{-O1} or higher to enable +@option{-D_FORTIFY_SOURCE}.@footnote{@uref{http://www.redhat.com/archives/fedora-tools-list/2004-September/msg00002.html}} + -+The unsecure program @file{bof.c} shown in the previos section can be compiled ++The insecure program @file{bof.c} shown in the previous section can be compiled +with the option @option{-D_FORTIFY_SOURCE=2 -O2}. + +@example @@ -281,7 +281,7 @@ + +The output shows that the @file{bof.c} program compiled with the option +@option{-D_FORTIFY_SOURCE=2 -O2} creates an executable @file{bof-fort} which -+stops before executing an unsecure buffer overflow code. ++stops before executing an insecure buffer overflow code. + +This @option{-D_FORTIFY_SOURCE} option is a quick fix for older programs +written with fixed length buffers. But if you are writing a software program @@ -307,9 +307,9 @@ +forces the program to load and link completely and marks its GOT read-only with +the @option{-Wl,z,relro} option before turning over control to the program. + -+Since this option causes startup slowdown for large applications, this is not ++Since this option causes start-up slowdown for large applications, this is not +enabled by default. But this option may be interesting for the security -+concious network daemons. ++conscious network daemons. @node Platform-specific options @chapter Platform-specific options diff -Nru gccintro-1.0/debian/patches/0003-Update-title-etc.-for-Debian.patch gccintro-1.0/debian/patches/0003-Update-title-etc.-for-Debian.patch --- gccintro-1.0/debian/patches/0003-Update-title-etc.-for-Debian.patch 2012-07-16 17:18:07.000000000 +0900 +++ gccintro-1.0/debian/patches/0003-Update-title-etc.-for-Debian.patch 2012-08-18 20:22:07.000000000 +0900 @@ -1,4 +1,4 @@ -From 822227b15bc74fedb070388a493c81c93e315151 Mon Sep 17 00:00:00 2001 +From f761be5e2075b87d01e54a2a42ccc451522d7565 Mon Sep 17 00:00:00 2001 From: Osamu Aoki <os...@debian.org> Date: Sun, 15 Jul 2012 14:18:43 +0900 Subject: [PATCH 3/3] Update title etc. for Debian @@ -7,14 +7,14 @@ No @ifset publish Add comment of Debian adjustment to the original --- - gccintro.texi | 13 ++++++++++--- - 1 file changed, 10 insertions(+), 3 deletions(-) + gccintro.texi | 15 ++++++++++++--- + 1 file changed, 12 insertions(+), 3 deletions(-) diff --git a/gccintro.texi b/gccintro.texi -index ed84052..26da569 100644 +index 4148e38..2036470 100644 --- a/gccintro.texi +++ b/gccintro.texi -@@ -25,13 +25,18 @@ +@@ -25,13 +25,19 @@ @titlepage @title An Introduction to GCC @subtitle for the GNU Compilers @code{gcc} and @code{g++} @@ -25,8 +25,9 @@ @page +Debian package version. 2012 + -+The content of this Debian packaged version has some minor adjustments to -+match learning experiences under the Debian environment. ++The content of this Debian packaged version adds a chapter on ``Security ++enhancement options'' and makes some minor file path adjustments to match ++learning experiences under the Debian environment. @vskip 0pt plus 1filll -@ifset publish @flushleft @@ -35,7 +36,7 @@ A catalogue record for this book is available from the British Library. Second printing, August 2005 (1/8/2005). Revised and updated. -@@ -61,7 +66,6 @@ of Static Free Software +@@ -61,7 +67,6 @@ of Static Free Software Free Software provides support for Electric to the electronics design industry. @vskip 1ex @@ -43,13 +44,14 @@ Copyright @copyright{} 2004, 2005 Network Theory Ltd. Permission is granted to copy, distribute and/or modify this document -@@ -93,6 +97,9 @@ This manual provides an introduction to the GNU C and C++ Compilers, +@@ -93,6 +98,10 @@ This manual provides an introduction to the GNU C and C++ Compilers, The development of this manual was funded entirely by @uref{http://www.network-theory.co.uk/,Network Theory Ltd}. Copies published by Network Theory Ltd raise money for more free documentation. + -+The content of this Debian packaged version has some minor adjustments to -+match learning experiences under the Debian environment. ++The content of this Debian packaged version adds a chapter on ``Security ++enhancement options'' and makes some minor file path adjustments to match ++learning experiences under the Debian environment. @end ifnottex @menu diff -Nru gccintro-1.0/debian/README.Debian gccintro-1.0/debian/README.Debian --- gccintro-1.0/debian/README.Debian 2012-07-16 17:18:15.000000000 +0900 +++ gccintro-1.0/debian/README.Debian 2012-08-18 20:32:47.000000000 +0900 @@ -1,7 +1,8 @@ gccintro for Debian ------------------- -The content of this Debian packaged version has some minor adjustments to -match learning experiences under the Debian environment. +The content of this Debian packaged version adds a chapter on ``Security +enhancement options'' and makes some minor file path adjustments to match +learning experiences under the Debian environment. - -- Osamu Aoki <os...@debian.org> Mon, 16 Jul 2012 00:58:02 +0900 + -- Osamu Aoki <os...@debian.org> Sat, 18 Aug 2012 20:32:36 +0900