Package: python2.7
Version: 2.7.13-2
Severity: normal

[stratocaster ~]nm --dynamic /usr/bin/python2.7 | grep md5
00091732 T init_md5
001d6890 T md5_append
001d67d0 T md5_finish
000919f3 T md5_init
[stratocaster ~]

This causes trouble when trying to use bindings to a crypto library
which also wants to define `md5_init', because they disagree about how
the hashing state ought to be arranged: the outcome is a wrong answer on
amd64, and a segfault on i386.  While it can certainly be argued that
neither Python nor the other library has especially good taste in
naming, `md5_init' is at least a proper, documented part of the
library's public interface, directly relevant to its purpose (and has
been since 1999), though the same can't be argued for Python:

[stratocaster ~]grep -ri md5 /usr/include/python2.7/
[stratocaster ~]

Indeed, it seems that the Python package has leaked its MD5 symbols
before: see bug #440272.

I'm deploying an awful hack involving `RTLD_DEEPBIND' in the meantime,
but it would be nice to get this fixed properly.

-- System Information:
Debian Release: 9.0
  APT prefers stable
  APT policy: (990, 'stable')
Architecture: i386 (i686)
Foreign Architectures: amd64

Kernel: Linux 4.9.0-3-amd64 (SMP w/3 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages python2.7 depends on:
ii  libpython2.7-stdlib  2.7.13-2
ii  mime-support         3.60
ii  python2.7-minimal    2.7.13-2

python2.7 recommends no packages.

Versions of packages python2.7 suggests:
ii  binutils       2.28-5
ii  python2.7-doc  2.7.13-2

-- no debconf information

Reply via email to