Your message dated Thu, 29 Sep 2011 07:03:37 +0000
with message-id <e1r9aef-0006dk...@franck.debian.org>
and subject line Bug#643380: fixed in gconf-cleaner 0.0.3-5
has caused the Debian Bug report #643380,
regarding gconf-cleaner: FTBFS: main.c:84:15: error: format not a string
literal and no format arguments [-Werror=format-security]
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
643380: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=643380
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: gconf-cleaner
Version: 0.0.3-4
Severity: serious
Tags: wheezy sid
User: debian...@lists.debian.org
Usertags: qa-ftbfs-20110923 qa-ftbfs hardening-format-security hardening
Justification: FTBFS on amd64
Hi,
During a rebuild of all packages in sid, your package failed to build on
amd64.
Relevant part:
> gcc -DHAVE_CONFIG_H -I. -I. -I.. -DG_LOG_DOMAIN="\"GConf-Cleaner\"" -pthread
> -DORBIT2=1 -I/usr/include/gtk-2.0 -I/usr/lib/x86_64-linux-gnu/gtk-2.0/include
> -I/usr/include/atk-1.0 -I/usr/include/gdk-pixbuf-2.0 -I/usr/include/pango-1.0
> -I/usr/include/pixman-1 -I/usr/include/freetype2 -I/usr/include/libpng12
> -I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -I/usr/include/cairo
> -I/usr/include/gio-unix-2.0/ -I/usr/include/gconf/2 -I/usr/include/orbit-2.0
> -g -O2 -fstack-protector --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2
> -Wformat -Wformat-security -Werror=format-security -Wall -c main.c
> main.c: In function '_gconf_cleaner_error_dialog':
> main.c:84:15: error: format not a string literal and no format arguments
> [-Werror=format-security]
> main.c:87:8: error: format not a string literal and no format arguments
> [-Werror=format-security]
> main.c: In function '_gconf_cleaner_question_dialog':
> main.c:123:15: error: format not a string literal and no format arguments
> [-Werror=format-security]
> main.c:127:8: error: format not a string literal and no format arguments
> [-Werror=format-security]
> main.c:136:11: warning: cast from pointer to integer of different size
> [-Wpointer-to-int-cast]
> cc1: some warnings being treated as errors
>
> make[3]: *** [main.o] Error 1
The full build log is available from:
http://people.debian.org/~lucas/logs/2011/09/23/gconf-cleaner_0.0.3-4_lsid64.buildlog
This happened because since dpkg 1.16.0 [0], hardening flags are enabled
under various conditions.
[0] http://lists.debian.org/debian-devel-announce/2011/09/msg00001.html
A list of current common problems and possible solutions is available at
http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute!
About the archive rebuild: The rebuild was done on about 50 AMD64 nodes
of the Grid'5000 platform, using a clean chroot. Internet was not
accessible from the build systems.
--- End Message ---
--- Begin Message ---
Source: gconf-cleaner
Source-Version: 0.0.3-5
We believe that the bug you reported is fixed in the latest version of
gconf-cleaner, which is due to be installed in the Debian FTP archive:
gconf-cleaner_0.0.3-5.debian.tar.gz
to main/g/gconf-cleaner/gconf-cleaner_0.0.3-5.debian.tar.gz
gconf-cleaner_0.0.3-5.dsc
to main/g/gconf-cleaner/gconf-cleaner_0.0.3-5.dsc
gconf-cleaner_0.0.3-5_amd64.deb
to main/g/gconf-cleaner/gconf-cleaner_0.0.3-5_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 643...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Ludovico Cavedon <cave...@debian.org> (supplier of updated gconf-cleaner
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 28 Sep 2011 23:31:36 -0700
Source: gconf-cleaner
Binary: gconf-cleaner
Architecture: source amd64
Version: 0.0.3-5
Distribution: unstable
Urgency: low
Maintainer: Ludovico Cavedon <cave...@debian.org>
Changed-By: Ludovico Cavedon <cave...@debian.org>
Description:
gconf-cleaner - GConf database cleaner
Closes: 643380
Changes:
gconf-cleaner (0.0.3-5) unstable; urgency=low
.
* Added format-string.patch for fixing potentianl format string
vulnerability (Closes: #643380).
* Update Standards-Version to 3.9.2.
* Drop uneeded dependency on quilt.
* Link to the correct version of the GPL in the copyright file and remove
reference to automatically generated files
Checksums-Sha1:
d83e2663e3d907850199f4b473ce39b3a2fc1953 2015 gconf-cleaner_0.0.3-5.dsc
3730867903e94029a85e14d19efdb70992577954 13641
gconf-cleaner_0.0.3-5.debian.tar.gz
de35192dc0bd79012c6eeaee595025546e8a4a97 35070 gconf-cleaner_0.0.3-5_amd64.deb
Checksums-Sha256:
dc72982a6126f7e23be4cb8430379fa90b0b4a1daebc7825c179219b4e010d39 2015
gconf-cleaner_0.0.3-5.dsc
2a081588b53ea813f5a7dcb1544a599a0d6a0f83c5ef0bbddbec89a9c1456961 13641
gconf-cleaner_0.0.3-5.debian.tar.gz
4c2ec4c6c9967053ca6ffd8008752cc1d9cc5959f0588f7776e2b42e9d7facc2 35070
gconf-cleaner_0.0.3-5_amd64.deb
Files:
d778d46691ff4f166c5301a53de32c78 2015 gnome optional gconf-cleaner_0.0.3-5.dsc
0b3b97a7769ed86190f952e07fe10c05 13641 gnome optional
gconf-cleaner_0.0.3-5.debian.tar.gz
21d5ad086cb2cae9de9ee3c54919ee94 35070 gnome optional
gconf-cleaner_0.0.3-5_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)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=7q21
-----END PGP SIGNATURE-----
--- End Message ---
