Bug#756722: lintian: false positive for embedded-library error

2015-09-15 Thread Raphael Geissert
Hi Niels,

On 24 August 2015 at 09:00, Niels Thykier  wrote:
> Hi Raphael,
>
> I noticed that you added the embedded-lib check for freetype.  The
> discriminator we currently use is a public function, which means even
> correct shared use may cause an auto-reject tag (see below).
>
>   * Are you aware of another discriminator we can use instead, which is
> not a part of the public API?

After digging in freetype's source code I found one that appears to be
safer and safe in general.
Attached patch makes lintian look for that other string. I will commit
it sometime during the week (I don't have access to my ssh key atm).

Apologies for responding until now.

Cheers,
-- 
Raphael Geissert - Debian Developer
www.debian.org - get.debian.net
From 98bda78e8afd03a7c25dc9a758fe957f13b5d340 Mon Sep 17 00:00:00 2001
From: Raphael Geissert 
Date: Tue, 15 Sep 2015 12:55:13 +0200
Subject: [PATCH] Correct the detection of freetype embedders (Closes: #756722)

Even though we now match on the name of a font, all the uses I could
find of it in the archive were copies of FreeType. Moreover, matching
on the name with the question mark should really limit the number of
false positives.
---
 data/binaries/embedded-libs |2 +-
 debian/changelog|3 +++
 2 files changed, 4 insertions(+), 1 deletions(-)

diff --git a/data/binaries/embedded-libs b/data/binaries/embedded-libs
index 0f979e2..2918446 100644
--- a/data/binaries/embedded-libs
+++ b/data/binaries/embedded-libs
@@ -39,7 +39,7 @@ bzip2 ||(?m)^This is a bug in bzip2
 curl  ||A libcurl function was given a bad argument
 expat ||(?m)^requested feature requires XML_DTD support in Expat
 file  ||(?m)^could not find any (?:valid )?magic files
-freetype  ||FT_Get_CID_Is_Internally_CID_Keyed
+freetype  ||HuaTianSongTi[?]
 ftgl  ||FTGlyphContainer
 gl2ps ||\(C\) 1999-2009 C\. Geuzaine
 glee  ||Extension name exceeds 1023 characters\.
diff --git a/debian/changelog b/debian/changelog
index dace2e9..bc1a8b0 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -8,6 +8,9 @@ lintian (2.5.38) UNRELEASED; urgency=medium
   * checks/obsolete-sites.pm:
 + [AB] Stop at <>, $, or " when emitting URLs as tag parameter.
 
+  * data/binaries/embedded-libs:
++ [RG] Use a different string to detect the copies of freetype
+  (Closes: #756722)
   * data/obsolete-sites/obsolete-sites:
 + [AB] Add patch by Hideki Yamane to add sourceforge.jp (Closes:
   #798736)
-- 
1.7.2.5



Bug#756722: lintian: false positive for embedded-library error

2015-08-24 Thread Niels Thykier
Hi Raphael,

I noticed that you added the embedded-lib check for freetype.  The
discriminator we currently use is a public function, which means even
correct shared use may cause an auto-reject tag (see below).

  * Are you aware of another discriminator we can use instead, which is
not a part of the public API?

Thanks,
~Niels

(quote in full for context)

On Sat, 2 Aug 2014 09:11:41 +0200 Jakub Wilk  wrote:
> Control: tags -1 + confirmed
> 
> * Atsuhito Kohda , 2014-08-02, 15:28:
> >>>'embedded-library usr/lib/texmacs/TeXmacs/bin/texmacs.bin: freetype', 
> >>>automatically rejected package.
> >> [...]
> >>>I rebuild the (accepted) former version of texmacs but got the same 
> >>>lintian error so I believe this should be false positive.
> >>
> >>Hmm, I can't reproduce it here. I rebuilt texmacs (1:1.0.7.18-1) in 
> >>up-to-date unstable amd64 chroot, but the resulting packages don't 
> >>trigger any such error.
> >
> >Sorry but I mean texmacs 1.99.1-1 (accepted one) and 1.99.1-2 (rejected 
> >one) in experimental.
> 
> Oh, I didn't notice that there's a package in experimental. That was a 
> bit of information I was missing.
> 
> Even the package from the archive triggers the Lintian error:
> 
> $ lintian -F texmacs_1.99.1-1_amd64.deb
> E: texmacs: embedded-library usr/lib/texmacs/TeXmacs/bin/texmacs.bin: freetype
> 
> (The package was accepted to the archive, because at that point Lintian 
> didn't have the check for freetype implemented yet.)
> 
> To detect embedded copies of freetype, Lintian looks for the string 
> "FT_Get_CID_Is_Internally_CID_Keyed" in the binaries. But this is a name 
> of a public function, and texmacs just happens to use it. So it's indeed 
> a false positive.
> 
> I'm not sure why exactly "FT_Get_CID_Is_Internally_CID_Keyed" was 
> chosen, and what would be a better string to use... Until we figure 
> it out, please add an override for the tag.
> 
> >I'll upload the package to my homepage but my main machine is in my 
> >office so it will happen after monday.
> 
> It's no longer necessary. :-)
> 
> -- 
> Jakub Wilk
> 
> 



Bug#756722: lintian: false positive for embedded-library error

2014-08-02 Thread Atsuhito Kohda
On Sat, 2 Aug 2014 09:11:41 +0200, Jakub Wilk wrote:

> * Atsuhito Kohda , 2014-08-02, 15:28:
(snip)
>>Sorry but I mean texmacs 1.99.1-1 (accepted one) and 1.99.1-2
>>(rejected one) in experimental.
> 
> Oh, I didn't notice that there's a package in experimental. That was a
> bit of information I was missing.
> 
> Even the package from the archive triggers the Lintian error:
> 
> $ lintian -F texmacs_1.99.1-1_amd64.deb
> E: texmacs: embedded-library usr/lib/texmacs/TeXmacs/bin/texmacs.bin:
> freetype
> 
> (The package was accepted to the archive, because at that point
> Lintian didn't have the check for freetype implemented yet.)
> 
> To detect embedded copies of freetype, Lintian looks for the string
> "FT_Get_CID_Is_Internally_CID_Keyed" in the binaries. But this is a
> name of a public function, and texmacs just happens to use it. So it's
> indeed a false positive.
> 
> I'm not sure why exactly "FT_Get_CID_Is_Internally_CID_Keyed" was
> chosen, and what would be a better string to use... Until we figure it
> out, please add an override for the tag.

I see.  Thanks for your clarification.

Best regards,   2014-8-2(Sat)

-- 
 Debian Developer - much more I18N of Debian
 Atsuhito Kohda 
 Department of Math., Univ. of Tokushima


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#756722: lintian: false positive for embedded-library error

2014-08-02 Thread Jakub Wilk

Control: tags -1 + confirmed

* Atsuhito Kohda , 2014-08-02, 15:28:
'embedded-library usr/lib/texmacs/TeXmacs/bin/texmacs.bin: freetype', 
automatically rejected package.

[...]
I rebuild the (accepted) former version of texmacs but got the same 
lintian error so I believe this should be false positive.


Hmm, I can't reproduce it here. I rebuilt texmacs (1:1.0.7.18-1) in 
up-to-date unstable amd64 chroot, but the resulting packages don't 
trigger any such error.


Sorry but I mean texmacs 1.99.1-1 (accepted one) and 1.99.1-2 (rejected 
one) in experimental.


Oh, I didn't notice that there's a package in experimental. That was a 
bit of information I was missing.


Even the package from the archive triggers the Lintian error:

$ lintian -F texmacs_1.99.1-1_amd64.deb
E: texmacs: embedded-library usr/lib/texmacs/TeXmacs/bin/texmacs.bin: freetype

(The package was accepted to the archive, because at that point Lintian 
didn't have the check for freetype implemented yet.)


To detect embedded copies of freetype, Lintian looks for the string 
"FT_Get_CID_Is_Internally_CID_Keyed" in the binaries. But this is a name 
of a public function, and texmacs just happens to use it. So it's indeed 
a false positive.


I'm not sure why exactly "FT_Get_CID_Is_Internally_CID_Keyed" was 
chosen, and what would be a better string to use... Until we figure 
it out, please add an override for the tag.


I'll upload the package to my homepage but my main machine is in my 
office so it will happen after monday.


It's no longer necessary. :-)

--
Jakub Wilk


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#756722: lintian: false positive for embedded-library error

2014-08-02 Thread Atsuhito Kohda
Hi Jakub,

On Fri, 1 Aug 2014 11:15:57 +0200, Jakub Wilk wrote:

> * Atsuhito Kohda , 2014-08-01, 11:08:
>>rejected by ftp-master because of lintian output:
>>'embedded-library usr/lib/texmacs/TeXmacs/bin/texmacs.bin: freetype',
>>automatically rejected package.
> [...]
>>I rebuild the (accepted) former version of texmacs but got the same
>>lintian error so I believe this should be false positive.
> 
> Hmm, I can't reproduce it here. I rebuilt texmacs (1:1.0.7.18-1) in
> up-to-date unstable amd64 chroot, but the resulting packages don't
> trigger any such error.

Sorry but I mean texmacs 1.99.1-1 (accepted one) and 1.99.1-2
(rejected one) in experimental.  Due to some fonts license issue,
I upload texmacs in experimental recently.

> Could you upload the packages somewhere (and preferably also the build
> log), so that we can take a close look at them?

I'll upload the package to my homepage but my main machine is
in my office so it will happen after monday.
Thanks for your work.

Best regards,   2014-8-2(Sat)

-- 
 Debian Developer - much more I18N of Debian
 Atsuhito Kohda 
 Department of Math., Univ. of Tokushima


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#756722: lintian: false positive for embedded-library error

2014-08-01 Thread Jakub Wilk

* Atsuhito Kohda , 2014-08-01, 11:08:

rejected by ftp-master because of lintian output:
'embedded-library usr/lib/texmacs/TeXmacs/bin/texmacs.bin: freetype', 
automatically rejected package.

[...]
I rebuild the (accepted) former version of texmacs but got the same 
lintian error so I believe this should be false positive.


Hmm, I can't reproduce it here. I rebuilt texmacs (1:1.0.7.18-1) in 
up-to-date unstable amd64 chroot, but the resulting packages don't 
trigger any such error.


Could you upload the packages somewhere (and preferably also the build 
log), so that we can take a close look at them?


--
Jakub Wilk


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#756722: lintian: false positive for embedded-library error

2014-07-31 Thread Atsuhito Kohda
Package: lintian
Version: 2.5.25
Severity: important

Dear Maintainer,


   * What led up to the situation?
   usual debuild and pdebuild.

   * What exactly did you do (or not do) that was effective (or
 ineffective)?
   usual debuild and pdebuild.

   * What was the outcome of this action?
   rejected by ftp-master because of 
   lintian output: 'embedded-library usr/lib/texmacs/TeXmacs/bin/texmacs.bin: 
freetype', automatically rejected package.

   * What outcome did you expect instead?
   smooth upload without any error.

I rebuild the (accepted) former version of texmacs but got the
same lintian error so I believe this should be false positive.

Thanks for your efforts.

Best regards,   2014-8-1(Fri)

Atsuhito Kohda

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.14-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=ja_JP.UTF-8, LC_CTYPE=ja_JP.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages lintian depends on:
ii  binutils   2.24.51.20140727-1
ii  bzip2  1.0.6-7
ii  diffstat   1.58-1
ii  file   1:5.19-1
ii  gettext0.19.2-1
ii  hardening-includes 2.5
ii  intltool-debian0.35.0+20060710.1
ii  libapt-pkg-perl0.1.29+b1
ii  libarchive-zip-perl1.37-2
ii  libclass-accessor-perl 0.34-1
ii  libclone-perl  0.37-1
ii  libdpkg-perl   1.17.10
ii  libemail-valid-perl1.194-1
ii  libfile-basedir-perl   0.03-1
ii  libipc-run-perl0.92-1
ii  liblist-moreutils-perl 0.33-2
ii  libparse-debianchangelog-perl  1.2.0-1
ii  libtext-levenshtein-perl   0.09-1
ii  libtimedate-perl   2.3000-2
ii  liburi-perl1.64-1
ii  man-db 2.6.7.1-1
ii  patchutils 0.3.3-1
ii  perl [libdigest-sha-perl]  5.18.2-7
ii  t1utils1.37-2

Versions of packages lintian recommends:
ii  libautodie-perl 2.25-1
ii  libperlio-gzip-perl 0.18-3
ii  perl-modules [libautodie-perl]  5.18.2-7

Versions of packages lintian suggests:
pn  binutils-multiarch 
ii  dpkg-dev   1.17.10
ii  libhtml-parser-perl3.71-1+b1
pn  libtext-template-perl  
pn  libyaml-perl   
ii  xz-utils   5.1.1alpha+20120614-2

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org