Bug#937834: python-iniparse: Python2 removal in sid/bullseye

[Ludovico Cavedon]

Stuar,

On Sun, Dec 22, 2019 at 2:57 AM Stuart Prescott  wrote:

> I've prepared an upload for this package and made a MR on salsa with the
> relevant changes.
>
> https://salsa.debian.org/debian/python-iniparse/merge_requests/1


Thank you. Please go ahead.

Andrej also contacted me a while ago about moving it into DPMT Maintenance,
about which I am happy.
Do you need me to do an official RFA, or can you just update the Maintainer
field with the next upload?

Thank you.
Ludovico

Bug#921704: tortoisehg: uninstallable with mercurial 4.9

[Ludovico Cavedon]

On Mon, Feb 18, 2019 at 11:39 AM Julien Cristau  wrote:

> Well it's going to be delayed by virtue of making tortoisehg and hg-git
> uninstallable anyway, for now.  Is there an ETA on a tortoise 4.9
> release?
>
>
Let me check with upstream.

Thanks,
Ludovico

Bug#921704: tortoisehg: uninstallable with mercurial 4.9

[Ludovico Cavedon]

On Mon, Feb 18, 2019 at 10:58 AM Julien Cristau  wrote:

> > Thank you for the bug report. TortoiseHg 4.9 has not been released yet.
> >
> There's no need for the tags, and this will affect buster when mercurial
> migrates so they're wrong anyway.
>

I see.
Would it make sense to delay the migration of mercurial until an updated
tortoisehg is migrated, so we avoid removing tortoisehg from testing, given
the upcoming release?

Thanks,
Ludovico

Bug#921704: tortoisehg: uninstallable with mercurial 4.9

[Ludovico Cavedon]

package src:tortoisehg
tags 921704 + sid experimental
thanks

Thank you for the bug report. TortoiseHg 4.9 has not been released yet.

Ludovico

On Fri, Feb 8, 2019 at 12:09 AM Julien Cristau  wrote:

> Source: tortoisehg
> Version: 4.8.1-0.1
> Severity: serious
> X-Debbugs-Cc: James Cowgill 
>
> Hi,
>
> mercurial 4.9 is now in sid, so tortoisehg needs an update.
>
> Cheers,
> Julien
>

Bug#920648: ntopng: missing libssl-dev dependency

[Ludovico Cavedon]

Thank you for your help!

Ludovico

On Sun, Feb 3, 2019 at 7:24 PM peter green  wrote:

> I have uploaded a NMU fixing this bug, a debdiff is attatched. Per the NMU
> guidelines since this RC bug is 7 days old with no maintainer response I
> have uploaded the NMU without delay.
>
>

Bug#919907: ntopng FTBFS with ndpi 2.6

[Ludovico Cavedon]

Thank you for bug report. I am going to upload ntopng 3.8 soon and it will
fix the build against the latest ndpi.

Ludovico

On Sun, Jan 20, 2019 at 8:36 AM Adrian Bunk  wrote:

> Source: ntopng
> Version: 2.4+dfsg1-4
> Severity: serious
> Tags: ftbfs
>
>
> https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/ntopng.html
>
> ...
> g++ -g -Wall -I/build/1st/ntopng-3.2+dfsg1
> -I/build/1st/ntopng-3.2+dfsg1/include -I/usr/local/include
> -D_FILE_OFFSET_BITS=64 -I/usr/include/hiredis -I/usr/include/hiredis
> -I/build/1st/ntopng-3.2+dfsg1/third-party/mongoose -I/usr/include/json-c
> -I/usr/include/ndpi/libndpi
> -I/build/1st/ntopng-3.2+dfsg1/third-party/LuaJIT-2.1.0-beta3/src  -isystem
> /usr/include/mit-krb5 -I/usr/include/pgm-5.2
> -I/usr/lib/x86_64-linux-gnu/pgm-5.2/include -I/usr/include/mariadb
> -I/usr/include/mariadb/mysql -Wdate-time -D_FORTIFY_SOURCE=2
> -I/build/1st/ntopng-3.2+dfsg1 -I/build/1st/ntopng-3.2+dfsg1/include
> -I/usr/local/include
> -I/build/1st/ntopng-3.2+dfsg1/third-party/http-client-c/src/
> -I/usr/include/openssl  -DDATA_DIR='"/usr/share"'
> -I/build/1st/ntopng-3.2+dfsg1/third-party/libgeohash
> -I/build/1st/ntopng-3.2+dfsg1/third-party/patricia  -g -O2
> -ffile-prefix-map=/build/1st/ntopng-3.2+dfsg1=. -fstack-protector-strong
> -Wformat -Werror=format-security -c src/AlertCounter.cpp -o
> src/AlertCounter.o
> In file included from src/AlertCounter.cpp:22:
> /build/1st/ntopng-3.2+dfsg1/include/ntop_includes.h:107:10: fatal error:
> ndpi_main.h: No such file or directory
>  #include "ndpi_main.h"
>   ^
> compilation terminated.
> make[2]: *** [Makefile:153: src/AlertCounter.o] Error 1
>

Bug#886133: ndpi: FTBFS on mips, s390x, powerpc, and ppc64: tests time out

[Ludovico Cavedon]

Hi,

 I have an update on this: I have a patch for upstream review at
https://github.com/ntop/nDPI/pull/506.
It fixes this issue, but unittests still fail on s90x (and I guess on the
other big endian archs), so no new upload for now, until I debug that.

Ludovico

Bug#885955: FTBFS: /usr/bin/ld: cannot find -ljvm

[Ludovico Cavedon]

package src:jcc
tags 885955 + confirmed pending
thanks

On Sun, Dec 31, 2017 at 3:06 PM Adam Borowski  wrote:

> I'm afraid that your package fails to build on armhf, with:
> /usr/bin/ld: cannot find -ljvm
>
> It does succeed on at least amd64, though.
>

For  some reason openjdk on that architecture does not have
server/libjvm.so, but only client/libjsvm.so.
I have added some fall-back logic. The upload is currently in the NEW queue.

Thanks,
Ludovico

Bug#886133: ndpi: FTBFS on mips, s390x, powerpc, and ppc64: tests time out

[Ludovico Cavedon]

Thank you for looking into this.

On Tue, Jan 2, 2018 at 12:15 PM Aaron M. Ucko  wrote:

> > It so happens that I was having a brief look already :)
>
> Great, thanks!
>
> > The hang occurs inside the above while loop. Notice that the value
> > loaded into "label" inside the loop never changes and this is the only
> > variable the loop condition depends on. Therefore, if the initial loop
> > condition is true, the program will loop forever.
>
> So I see.  Perhaps the intent was to update mpls after bumping ip_offset.
>

Yes, there is clearly something missing.
Probably
mpls = (struct ndpi_mpls_header *) [ip_offset];
is missing from inside the loop.

I will check on this before the end of the week, follow up with upstream,
and patch.

Thanks,
Ludovico

Bug#883787: ntopng: Error "Missing CSRF parameter" in "Manage users" and "Preferences"

[Ludovico Cavedon]

Hi Daniel,

Thank you for the report.
As you described, the issues is exactly the same as #856048, so I am going
to merge the bugs.
Given that this impacts a core functionality, it may qualify for a stable
release update. I will check with the stable release team.

Thanks,
Ludovico


On Thu, Dec 7, 2017 at 3:45 PM Daniel Aubry 
wrote:

> Package: ntopng
> Version: 2.4+dfsg1-3
> Severity: grave
> Justification: renders package unusable
>
> Dear Maintainer,
>
> This is fixed in ntopng/2.4+dfsg1-4 which is not available on debian
> stretch.
>
> Please see bug #856048 for more details.
>
> It is not possible to access the "Manage users" and "Preferences" links on
> the web interface. Both will display an error message:
>
>  Script "/lua/admin/users.lua" returned an error:
>  Missing CSRF parameter
>
>  Script "/lua/admin/prefs.lua" returned an error:
>  Missing CSRF parameter
>
>
> This is the important changelog entry of version 2.4+dfsg1-4
>
>   * Update Check-for-presence-of-crsf-in-admin-scripts.patch to avoid the
> 'Missing CSRF parameter' error (Closes: #856048).
>
>
> Best Reards
> Daniel
>
> -- System Information:
> Debian Release: 9.2
>   APT prefers stable-updates
>   APT policy: (500, 'stable-updates'), (500, 'stable')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 4.9.0-4-amd64 (SMP w/2 CPU cores)
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
> LANGUAGE=en_US:en (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: systemd (via /run/systemd/system)
>
> Versions of packages ntopng depends on:
> ii  init-system-helpers  1.48
> ii  libc62.24-11+deb9u1
> ii  libcurl3-gnutls  7.52.1-5+deb9u3
> ii  libgcc1  1:6.3.0-18
> ii  libgeoip11.6.9-4
> ii  libhiredis0.13   0.13.3-2
> ii  libjson-c3   0.12.1-1.1
> ii  libluajit-5.1-2  2.0.4+dfsg-1+b1
> ii  libmariadbclient18   10.1.26-0+deb9u1
> ii  libndpi4 1.8-1
> ii  libpcap0.8   1.8.1-3
> ii  librrd8  1.6.0-1+b2
> ii  libsqlite3-0 3.16.2-5
> ii  libstdc++6   6.3.0-18
> ii  libzmq5  4.2.1-4
> ii  lsb-base 9.20161125
> ii  ntopng-data  2.4+dfsg1-3
> ii  redis-server 3:3.2.6-1
> ii  zlib1g   1:1.2.8.dfsg-5
>
> ntopng recommends no packages.
>
> Versions of packages ntopng suggests:
> pn  geoip-database-contrib  
>
> -- no debconf information
>

Bug#816975: qutecom: should this package be removed?

[Ludovico Cavedon]

On Sat, Apr 2, 2016 at 6:34 PM Ludovico Cavedon <cave...@debian.org> wrote:

> Thanks for bringing this up, I will submit a removal request now.
>
>
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819848

Ludovico

Bug#816975: qutecom: should this package be removed?

[Ludovico Cavedon]

Hi,

On Sun, Mar 6, 2016 at 3:00 PM Sebastian Ramacher 
wrote:

> quotecom seems to be dead upstream (qutecom.org is no longer reachable,
> last
> upstream release was four years ago) and has many bugs that will become RC
> soonish: #803856 (ffmpeg transition), #812163 (GCC 6) and #816812 (Qt4
> WebKit
> removal).
>
> So should quotecom be removed from unstable?
>
>
I think so.
No interest from the pkg-voip-maintainers group anyways:
https://lists.alioth.debian.org/pipermail/pkg-voip-maintainers/2015-December/027732.html

Thanks for bringing this up, I will submit a removal request now.
Ludovico

Bug#760688: geoip-database-update script coding errors

[Ludovico Cavedon]

Hi,

first of all for the bug report and the suggestions.
I am working in including them.

On Sat, Sep 6, 2014 at 3:22 PM, roma1390 roma1...@gmail.com wrote:
 1. general naming must be followed, and script named like other update-*
 scripts

update-geoip-database-contrib

I am not sure it is a *must* (I could not find this in the Debian
policy, for example).
The reason it is called geoip-database-contrib_update is that I find
it helpful when the commands in a package start with the package name.
However I see your point and I will also support the name you are suggesting.

 2. file update has race conditions:
- file is removed and later downloaded
- file decompresion is in place, this exposes partial file to user

 3. file download-update is not safe: wget can get redirect and name file
 with any name.
 so in /usr/share/GeoIP can be found files like index.html and others...

 4. write is done to /usr which is many cases can safely be assumed that is
 read-only

Make sense, fixing all of the above.

 Suggestions:

 1. place databases to /var/lib/cache/GeoIP/

I am assuming you meant /var/cache/GeoIP.
/var/cache is not the best place because if you remove that it it will
not be re-created until the update script is run again.
However /var/lib/geo-ip-database-contrib sounds good to me.

Thanks,
Ludovico


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#760688: geoip-database-update script coding errors

[Ludovico Cavedon]

package geoip-database-update
severity 760688 normal
thanks

On Sun, Sep 21, 2014 at 4:25 PM, Ludovico Cavedon cave...@debian.org wrote:
 2. file update has race conditions:
- file is removed and later downloaded
- file decompresion is in place, this exposes partial file to user

 3. file download-update is not safe: wget can get redirect and name file
 with any name.
 so in /usr/share/GeoIP can be found files like index.html and others...

Actually these issues are already fixed in version 1.9
- the decompression is not in place but to a temporary file
- the output filename -O option is already passed to wget (so no
arbitrary filename)
- the .dat is not removed before downloading (although it is removed
before renaming the new one, so there is a race condition that I am
fixing).

The security issue that was raising the severity to critical is not
there, so I am downgrading it to normal and will provide an upload
soon.

Cheers,
Ludovico


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#760990: ntopng: Several vulnerabilities fixed upstream in 1.2.1

[Ludovico Cavedon]

Hi Luca,

my understanding (supported by a simple test and code check) was that
CVE-2014-4329 was fixed in version 1.2.0
https://svn.ntop.org/bugzilla/show_bug.cgi?id=379

However, as Salvatore noticed, it is announced as being fixed in version 1.2.1.

Can you confirm which version fixed it, please?

Thanks,
Ludovico

On Tue, Sep 9, 2014 at 11:06 AM, Salvatore Bonaccorso car...@debian.org wrote:
 Source: ntopng
 Severity: grave
 Tags: security upstream fixed-upstream

 Hi Ludovico,

 Marking this bugreport as grave, as more information seem a bit
 scarce, so was not able to identify the issues. There is an upstream
 report [1] which mentions several fixes were done in ntopng 1.2.1.

  [1] http://www.ntop.org/ndpi/released-ndpi-1-5-1-and-ntopng-1-2-1/

 Fixes for
  - CVE-2014-5464

  - CVE-2014-4329

 Strangely this was marked as fixed in 1.2.0+dfsg1-1 in the security
 tracker at [2]. Is this information correct?

  [2] https://security-tracker.debian.org/tracker/CVE-2014-4329

  - CVE-2014-5511, CVE-2014-5512, CVE-2014-5513, CVE-2014-5514,
CVE-2014-5515

 No information referenced for these in the advisory.

 Could you have a look at them and also clarify if CVE-2014-4329
 version information is wrong in the tracker?

 Regards,
 Salvatore


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#757346: tortoisehg: toirtoisehg workbench crashes when viewing working directory

[Ludovico Cavedon]

On Thu, Aug 7, 2014 at 3:53 AM, Sébastien KALT sk...@throka.org wrote:
 If I downgrade mercurial to testing version (3.0.2-1) it doesn't crash.

 I've seen that there is a new upstream version for tortoisehg
 (http://tortoisehg.bitbucket.org/download/source.html) : 3.1

 As mercurial is version 3.1 in Sid, the problem might be here.

I am not able to reproduce the issue, but I am about to upload
tortoisehg 3.1, please reopen if the problem persists.

Thanks,
Ludovico


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#725665: nautilus-image-manipulator is marked for autoremoval from testing

[Ludovico Cavedon]

On Sun, Apr 13, 2014 at 6:51 AM, Emilien Klein emilien+deb...@klein.st wrote:
 I have just installed nautilus-image-manipulator in a fresh Sid
 installation (came with nautilus and python-nautilus as dependencies)
 and I didn't have any issues of any kind running nautilus and the extension.

 I assume this bug was indeed fixed with package 1.1-4?

I am not having this problem either (amd64 testing).

Even if the bug still exists for some people, the severity should be
important, not grave.

Thanks for looking into this,
Ludovico


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#737444: [src:ntop] Sourceless file (minified)

[Ludovico Cavedon]

Hi Bastien,

On Sun, Feb 2, 2014 at 12:58 PM, bastien ROUCARIES
roucaries.bast...@gmail.com wrote:
 I could not find the source of:
 html/jquery-1.7.2.min.js
 html/jquery-ui-1.8.16.custom.min.js
 html/jqplot/jquery.jqplot.min.js

Thank you for the bug report.

For jqplot I will include the source in and minify it during build.

For jquery(-ui), I see 3 options:
1) use the debian packaged version, and ignore the one on the tarball
2) as 1, but in addition removing it from the orig tarball (this would
render the orig tarball useless for non-debian building)
3) as 1, but adding the non-minified source somewhere in the debian
directory (but it is not going to be used anyways...).

Option 1 look the most reasonable to me, but I want to check you are ok with it.

Thanks,
Ludovico


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#725665: python-nautilus: ImportError: could not import gobject (could not find _PyGObject_API object)

[Ludovico Cavedon]

Package: python-nautilus
Version: 1.1-4
Followup-For: Bug #725665

Dear Maintainer,

the problem is still happening for me ob python-nautilus 1.1-4:

$ nautilus
Initializing nautilus-gdu extension
ImportError: could not import gobject (could not find _PyGObject_API object)

(nautilus:13263): Nautilus-Python-WARNING **: pygobject initialization failed

(nautilus:13263): Nautilus-Python-WARNING **: nautilus_python_init_python failed

Thank you,
Ludovico


-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (900, 'testing'), (300, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.10.7 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages python-nautilus depends on:
ii  gir1.2-nautilus-3.0  3.4.2-2
ii  libatk1.0-0  2.10.0-2
ii  libc62.17-93
ii  libcairo-gobject21.12.16-2
ii  libcairo21.12.16-2
ii  libgdk-pixbuf2.0-0   2.28.2-1
ii  libglib2.0-0 2.36.4-1
ii  libgtk-3-0   3.8.4-1
ii  libnautilus-extension1a  3.4.2-2
ii  libpango-1.0-0   1.32.5-5+b1
ii  libpangocairo-1.0-0  1.32.5-5+b1
ii  libpython2.7 2.7.5-8
ii  python-gi3.8.2-1

python-nautilus recommends no packages.

python-nautilus suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#693560: FTBFS against libav9

[Ludovico Cavedon]

Hi Luk,

On Sat, Aug 24, 2013 at 8:06 AM, Luk Claes l...@debian.org wrote:
 Your package is blocking the libav9 transition and will likely be
 removed from testing unless a solution is found soon.

Sorry about that and thank you for your notification.
I will be travelling the next two days, I will address it as soon as I
am back online.

Thanks,
Ludovico


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#710757: tortoisehg: not installable in sid

[Ludovico Cavedon]

package tortoisehg
tags 710757 + confirmed pending sid
thanks

On Sun, Jun 2, 2013 at 12:20 AM, Ralf Treinen trei...@free.fr wrote:
 tortoisehg is not installable in sid since it depends on

   mercurial (= 2.1~), mercurial ( 2.3~)

 However, the version of mercurial available in sid is 2.6.1-1.

Thank you for the report.
I will upload tortoisehg 2.8 soon.

Ludovico


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#702715: tortoisehg: broken pyqt4 version check

[Ludovico Cavedon]

package tortoisehg
forcemerge 702715 710453
tags 702715 + confirmed pending jessie sid
thanks

Hi,

On Wed, May 29, 2013 at 7:58 AM, Matthew Gabeler-Lee
chee...@fastcat.org wrote:
 This bug has now landed.  As the packages in testing / unstable now stand,
 you cannot use tortoisehg.

Thank you for the report and for looking into the issue.
I am about to upload the latest version (2.8) which is not affected by this bug.

Thanks,
Ludovico


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#700442: Merging #700442 and #647275

[Ludovico Cavedon]

package ntop
forcemerge 700442 647275
thanks

Merging #700442 and #647275.

Thanks to Helmut Grohne for finding the cause of the double free.

This problem has been already fixed in the latest upstream version by
removing the code handling ip fragments.

Being this a security related bug, I will soon prepare an update for
the version in squeeze-backports.

Thanks,
Ludovico


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#700442: ntop reliably segfaults in searchFragments

[Ludovico Cavedon]

Hi Helmut,

On Tue, Feb 19, 2013 at 8:23 PM, Helmut Grohne
h.gro...@cygnusnetworks.de wrote:
 I cannot send you a capture, because that could compromise the
 confidentiality of the data send by users. I am currently trying to
 reproduce the issue in a more controlled manner.

I understand.

 Please keep in mind that I am feeding 50MB/s at 50kpps to ntop. Even
 tcpdump is unable to keep up with this rate (even in SCHED_FIFO) and
 drops about 0.1% of the packets when being asked to write them to
 /dev/shm. Running ntop on this system consumes a full cpu. It will
 likely drop more packets. When adding valgrind it will likely drop
 most of the packets. So this might be a reason for why I am unable
 to observe the issue using valgrind.

Ok, makes sense.

 I will try the following:
  * Determine a small set of packets that reliably trigger some kind
of crash.
  * Trying to reproduce the issue with fresh gdbm databases.

This would be great. Having  set of packets that can trigger the crash
would be very useful.

It looks like the code handling IP fragments is the culprit (or maybe
the mostly affected one by the bug).
Maybe running a tcpdump capturing only fragmented packets could help.

 ==11364== Thread 3:
 ==11364== Invalid read of size 8
 ==11364==at 0x50CBB60: purgeOldFragmentEntries (ip.c:256)
 ==11364==by 0x50C9B96: purgeIdleHosts (hash.c:401)
 ==11364==by 0x50D7ABE: scanIdleLoop (ntop.c:683)
 ==11364==by 0x67A6B4F: start_thread (pthread_create.c:304)
 ==11364==by 0x5853A7C: clone (clone.S:112)
 ==11364==  Address 0x149cdc10 is 48 bytes inside a block of size 72 free'd
 ==11364==at 0x4C27D4E: free (vg_replace_malloc.c:427)
 ==11364==by 0x50D6115: ntop_safefree (leaks.c:182)
 ==11364==by 0x50CB7E7: deleteFragment (ip.c:113)
 ==11364==by 0x50CBB94: purgeOldFragmentEntries (ip.c:265)
 ==11364==by 0x50C9B96: purgeIdleHosts (hash.c:401)
 ==11364==by 0x50D7ABE: scanIdleLoop (ntop.c:683)
 ==11364==by 0x67A6B4F: start_thread (pthread_create.c:304)
 ==11364==by 0x5853A7C: clone (clone.S:112)


This is very interesting indeed. Even if it does not cause a crash,
this code is apparently operating on a segment that has already been
freed. I will look a bit more into in the following days.

Thanks for your help,
Ludovico


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#700442: ntop reliably segfaults in searchFragments

[Ludovico Cavedon]

package ntop
severity 700442 important
thanks

Hi,

On Wed, Feb 13, 2013 at 2:55 AM, Helmut Grohne
h.gro...@cygnusnetworks.de wrote:
 Running ntop under gdb. In most cases it segfaults within the first 10 
 seconds.

Thank you for the report.
I am downgrading the severity on the bug to important, as the bug does
not render it completely unusable to everyone.
In fact I have multiple installations of ntop running without crashing.

Are you able to send me a network capture that would make it crash?
Alternatively, can you run it under valgrind until it crashes, please?

Thanks,
Ludovico


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#695422: ntop: links with both libssl and libgdbm and is mainly GPL-licensed without linking exception

[Ludovico Cavedon]

Hi,

On Sat, Feb 9, 2013 at 9:05 AM, Giovanni Rapagnani g...@ideanet.be wrote:
 a 3rd solution is to recompile without ssl support.

Yes.
Turns out that porting to gnutls is not as simple as the openssl
wrapper is not enough.

I will apply your patch this weekend.

Thanks!

Ludovico


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#695422: ntop: links with both libssl and libgdbm and is mainly GPL-licensed without linking exception

[Ludovico Cavedon]

On Mon, Dec 10, 2012 at 1:04 PM, Francesco Poli
invernom...@paranoici.org wrote:
 Even if there's no *direct* linking of libgdm3 with libssl, it is my
 understanding that there is indeed an issue, as long as one single
 binary executable is linked with both libgdm3 and libssl.

 I believe that this follows from Section 3 of the GNU GPL v2.
 gdbm is the Program released under the terms of the GNU GPL v2 or
 later.
 The binary executable linked with it is a work based on it (according
 to the FSF's legal theory of linking, which is usually assumed to be
 valid by the Debian Project, in order to stay on the safe side...),
 and Section 3 states, in part:

 |   3. You may copy and distribute the Program (or a work based on it,
 | under Section 2) in object code or executable form under the terms of
 | Sections 1 and 2 above provided that you also do one of the following:
 |
 | a) Accompany it with the complete corresponding machine-readable
 | source code, which must be distributed under the terms of Sections
 | 1 and 2 above on a medium customarily used for software interchange; or,
 |
 [or other methods to make the source available...]

 Hence, one has to make the source code available under the terms of
 Sections 1 and 2, that is to say, among other things licensed as a
 whole at no charge to all third parties under the terms of [the GNU GPL
 v2] (see clause 2b).

I follow your reasoning and it makes sense to me.

However, Section 2 defines a work based on it [the Program] as a
modification. We are not making any modification to it.
Nevertheless, I see how you can argue that, according to the FSF and
Section 2b, ntop contains libgdm3.

So basically, are you telling me that *any* code that is dynamically
linked against a gpl library is automatically relicensed under GPL,
including the python interpreter for example? This does not sound
right to me...

Cheers,
Ludovico


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#695422: ntop: links with both libssl and libgdbm and is mainly GPL-licensed without linking exception

[Ludovico Cavedon]

Hi Francesco,

On Fri, Dec 7, 2012 at 1:13 PM, Francesco Poli (wintermute)
invernom...@paranoici.org wrote:
 I noticed that ntop is mainly licensed under the terms of the GNU GPL
 v2 or later, with only one file (ssl.c) having an OpenSSL linking
 exception.

 However, ntop seems to link with libssl (which is notoriously
 GPL-incompatible) and also seems to link with libgdbm (which [1]
 is licensed under the GNU GPL v2 or later, with no OpenSSL
 linking exception).

 [1] 
 http://packages.debian.org/changelogs/pool/main/g/gdbm/gdbm_1.8.3-11/libgdbm3.copyright

This does not look like an issue to me.
There is no linking from libgdm3 to openssl, and libgdm3 makes no use
of openssl, so the problematic clauses of the openssl do not apply to
to libgdm3.

 I am under the impression that several ntop source GPL-licensed
 files get compiled into a binary that links with libssl,
 but do not have any OpenSSL linking exception.

The only source code file which uses openssl is ssl_utils.c and it has
an openssl exception. I thought that was enough.
However, I did some reading to refresh my memory on the topic and I
can see how this could be interpreted to apply to all source code
files that to into the binary.

 The possible solutions I can think of are:

  A) ntop is modified so that it can link with GNUTLS, instead
 of OpenSSL

I can try to do this. Hopefully the release team will accept the patch.

  B) an OpenSSL linking exception is granted to all the relevant
 files by the respective copyright holders and also to

I do not think this is feasible as there are far too many contributors.

Thank you for the report,
Ludovico


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#692732: src:ntop: non-free files in main (CC-BY-NC)

[Ludovico Cavedon]

package src:ntop
tags 692732 + confirmed
thanks

Hi,

On Sun, Nov 18, 2012 at 5:05 AM, Ivo De Decker ivo.dedec...@ugent.be wrote:
 On Thu, Nov 08, 2012 at 11:39:53AM +, Ansgar Burchardt wrote:
 Files: countmin.h
 Copyright: 2003-2004, G. Cormode
 License: CC-BY-NC

 That is obviously a non-free, GPL-incompatible license.

 countmin.c is also licensed under CC-BY-NC. This is not listed in
 debian/copyright.

Thanks for the report. I must have missed those 2 files.
After further investigation I have realized also prng.[ch] are under
the same license.

I have written to the author to see if we can get a double license
CC-BY-NC and GPL, but I have not received an answer yet.
I am going to talk to ntop upstream, and see what are the options for
replacing it.

Cheers,
Ludovico


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#689831: gconf-cleaner: Impossible to backup configuration

[Ludovico Cavedon]

Andrew,

gconf-cleaner has been abandoned by upstream for a while now and I do
not believe it in a shape suitable for a stable release, so I am going
to ask removal from Debian.

Thanks for reporting the issue,
Cheers,
Ludovico

On Wed, Oct 24, 2012 at 1:31 PM, Andrew Starr-Bochicchio
a.star...@gmail.com wrote:
 This was reported upstream at:

 http://code.google.com/p/gconf-cleaner/issues/detail?id=18

 It was also reported in Ubuntu at:

 https://bugs.launchpad.net/debian/+source/gconf-cleaner/+bug/764041

 The issue seems to be that gconf-cleaner does not support the Schema value:

 http://developer.gnome.org/gconf/2.32/gconf-gconf-schema.html#GConfSchema

 -- Andrew Starr-Bochicchio

Ubuntu Developer https://launchpad.net/~andrewsomething
Debian Maintainer
 http://qa.debian.org/developer.php?login=a.starr.b%40gmail.com
PGP/GPG Key ID: D53FDCB1


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#678558: tortoisehg-nautilus: TortoiseHg does not work at all

[Ludovico Cavedon]

package tortoisehg-nautilus
severity 678558 normal
tags 678558 + moreinfo unreproducible
thanks

On Sat, Jun 23, 2012 at 1:33 AM, Ludovico Cavedon
ludovico.cave...@gmail.com wrote:
 On Fri, Jun 22, 2012 at 10:36 AM, Leandro Doctors ldoct...@gmail.com wrote:
 The TortoiseHg contextual menu does not appear (either in Hg-managed or non 
 Hg-
 managed folders)

 I am not able to reproduce the the problem.
 Could you try:
 [...]

Lowering severity, as I am not able to reproduce it and I was not able
to get more feedback.

Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#679749: src:ntop: maintainer address bounces

[Ludovico Cavedon]

package src:ntop
merge 679734 679749
thanks

On Sun, Jul 1, 2012 at 3:05 AM, Ansgar Burchardt ans...@debian.org wrote:
 The maintainer address bounces:

   jor...@linuxgen.com
 retry timeout exceeded

Thanks for the report.
I am trying to reach Jordan.

Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#678558: tortoisehg-nautilus: TortoiseHg does not work at all

[Ludovico Cavedon]

Hi,

On Fri, Jun 22, 2012 at 10:36 AM, Leandro Doctors ldoct...@gmail.com wrote:
 The TortoiseHg contextual menu does not appear (either in Hg-managed or non 
 Hg-
 managed folders)

I am not able to reproduce the the problem.
Could you try:
-starting thg from a terinal? Does it work?
-start nautilus from a terminal and paste me the output
-do you have the /usr/share/nautilus-python/extensions/nautilus-thg.py file?

Thanks,
Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#644697: tortoisehg-nautilus: Please transition to nautilus 3 and GObject introspection

[Ludovico Cavedon]

package tortoisehg-nautilus
forcemerge 644697 612574
tags 644697 + confirmed
thanks

On Sat, Oct 8, 2011 at 2:46 AM,  j...@debian.org wrote:
 The introduction of nautilus 3 to unstable is imminent. In this version,
 the extensions interface has changed, and tortoisehg-nautilus
 requires changes to support this version:
  * porting to GTK+ 3
  * porting from PyGTK to the GObject Introspection mechanism

Unfortunately upstream has no interest in porting the extension to gtk
3, so I am going to remove the tortoisehg nautilus extension.

Cheers,
Ludovico



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#644585: jcc: FTBFS: Java JDK directory '/usr/lib/jvm/java-6-openjdk-arm' does not exist.

[Ludovico Cavedon]

package jcc
tags 644585 + confirmed pending
thanks

On Fri, Oct 7, 2011 at 1:03 AM, Nobuhiro Iwamatsu iwama...@nigauri.org wrote:
 jcc FTBFS on armel, powerpc and sh4.

Thank you for the patch. I have made some changes and I am uploading
the new package.
It should now be more robust and not fail of all the openjdk supported
sarchitectures.

Thanks,
Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#626713: ntop crashes my kernel

[Ludovico Cavedon]

package ntop
severity 626713 important
tags 626713 + moreinfo
thanks

Lowering severity as looks like it is dependent on your specific a
hardware and is likely to be a kernel bug. However, I need some more
information (see previous message) before reassigning the bug.

Thanks,
Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#626713: ntop crashes my kernel

[Ludovico Cavedon]

Hi,

On 05/14/2011 08:20 AM, Robert wrote:
 Installing this package will eventually crash my system and renders it 
 unbootable.  (FWIW, iftop works fine.)  I appear to be using e1000 for my 
 network driver and my computer is a Dell Optiplex GX280.

It sounds like a kernel bug rather then a ntop bug, but I need more
information here: how did it crash? what messages do you see before the
system stops the booting process?

Thanks for reporting your issue,
Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#619103: The problem is indeed python-qscintilla2

[Ludovico Cavedon]

package tortoisehg
forcemerge 619103 619096
thanks

Hi,

thank you for debugging the issue and sorry for the silence, I was
travelling with no internet connection.

On 03/26/2011 12:10 PM, Christian Ohm wrote:
 As mentioned in #619096, this problem is indeed caused by python-qscintilla2,
 and a local rebuild of that package fixes it.

Ok, I have just requested a binNMU [1] for the architectures with build +b1.

Thanks,
Ludovico


[1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=619974



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#613696: qutecom: FTBFS: Build-Depends on non-existing libqtwebkit-dev

[Ludovico Cavedon]

On Feb 16, 2011 9:39 AM, Kurt Roeckx k...@roeckx.be wrote:
 You're build depending on libqtwebkit-dev | libqt4-dev ( 4:4.7),
 the buildd software will only consider libqtwebkit-dev and that's
 not in unstable.

Oh, I see.
Is there any way I can make a build-depends work with both qt 4.6 and 4.7,
i.e. libqtwebkit-dev exist only for 4.7, or will I have to change the build
depends anyway when 4.7 hit unstable?

Thanks,
Ludovico

Bug#611173: Fails to install

[Ludovico Cavedon]

package ntop
forcemerge 609070 611173
thanks

On 01/26/2011 03:44 AM, Kartik Mistry wrote:
 While installing ntop,
 
 Setting up ntop (3:4.0.3+dfsg1-1) ...
 dpkg: error processing ntop (--configure):
  subprocess installed post-installation script returned error exit status 30
  configured to not write apport reports
 Errors were encountered while processing: ntop

Yeah, this is a known issue of 4.0.3+dfsg1-1, which is fixed by the new
version just uploaded to unstable.

Thanks!
Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#607637: ntop: fails to install

[Ludovico Cavedon]

package ntop
tags 607637 + confirmed pending
thanks

On 12/20/2010 02:24 PM, Holger Levsen wrote:
   Setting up ntop (3:4.0.3+dfsg1-1) ...
   /var/lib/dpkg/info/ntop.config: 60: netstat: not found

Thanks for reporting the issue.
I have added a dependency on net-tools for next upload.

Cheers,
Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#607637: ntop: fails to install

[Ludovico Cavedon]

On 12/20/2010 03:31 PM, Julien Cristau wrote:
 On Mon, Dec 20, 2010 at 15:18:27 +0100, Ludovico Cavedon wrote:
 On 12/20/2010 02:24 PM, Holger Levsen wrote:
   Setting up ntop (3:4.0.3+dfsg1-1) ...
   /var/lib/dpkg/info/ntop.config: 60: netstat: not found

 Thanks for reporting the issue.
 I have added a dependency on net-tools for next upload.

 The config script must work with only Essential packages installed
 (policy 3.9.1).

Uhm, you are right. I changed the script to get the interface list from
/proc and dropped the dependency.

Thanks!
Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#595446: Re: ntop: diff for NMU version 3:3.3-14.1

[Ludovico Cavedon]

Hi Alexander,

On 01/-10/-28163 11:59 AM, Alexander Reichle-Schmehl wrote:
 Sure, I rescheduled them to delayed/15.  But if you would rather provide
 backports and not release the package, wouldn't it make sense to cancel
 it alltogether?

I am going to co-maintain ntop with Jordan. As you have probably seen,
we have just uploaded a new version of ntop changing the maintainers and
fixing the RC bug, as a temporary package until ntop 4 is ready. We are
are now going to ask removal from squeeze though.

Thanks for you patch and NMU!

Cheers,
Ludovico




-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#550947: qutecom segfaults at startup

[Ludovico Cavedon]

package qutecom
severity important
thanks

Giuseppe Sacco wrote:
 giuse...@scarafaggio:~$ OWLOGGER_DEFAULT=debug qutecom -style plastique
 (debug) 09:01:38 [Common] int main(int, char**): Started
 (debug) 09:01:38 [File] virtual bool FileReader::open():
 loading /usr/share/qutecom//config/config.xml
 (debug) 09:01:38 [Purple] void* PurpleMainEventLoop(void*): Starting
 gMainLoop
 (debug) 09:01:38 [File] virtual bool FileReader::open():
 loading /home/giuseppe/.qutecom/config.xml
 (debug) 09:01:38 [File] virtual bool FileReader::open():
 loading /home/giuseppe/.qutecom/config.xml
 (debug) 09:01:40 [Purple] virtual PurpleIMFactory::~PurpleIMFactory():
 Stopping gMainLoop

It might be related to the content of ~/.qutecom directory, as I am not
able to reproduce it.
Could you please try to rename it? (Do not just delete it, as the old
version may become useful for debugging).

Btw: I am lowering the severity as this bug does not seem to affect the
majority of the users.

Thanks,
Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#550947: qutecom segfaults at startup

[Ludovico Cavedon]

Hi,

Giuseppe Sacco wrote:
 Since last update on unstable, qutecom does not start anymore. This is a
 backtrace of what is happening:

Thanks for the backtrace.
Could you please also attach the output to the terminal when starting it with
OWLOGGER_DEFAULT=debug qutecom -style plastique
?

Thank you!
Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#542979: graphviz: FTBFS: gv_tcl.cpp:2052: error: expected, unqualified-id before '%' token

[Ludovico Cavedon]

package graphviz
tags 542979 + patch
thanks

Hi,
I am attaching a couple of patches I had to apply to make graphviz compile.

30_fix_ftbfs_gv_i.patch fixes the problem described in this bug. Some
code processed by swig has to be moved at the beginning out of the  { }
block.

However, the package will still FTBFS because of a changed parameter of
swig (-php, instead of -php5). See patch 40_swig_php_param.patch
I was not able to recover since which version swig changed that option.
It would be wise to put that version in the Build-Depends.

As a final note: graphviz will FTBFS also if tcl8.4 or previous are
installed, so

Build-Conflicts: tcl8.4, tcl8.3

should be added to the control file.

Thanks,
Ludovico
Description: fix swig-processed file
Author: Ludovico Cavedon ludovico.cave...@gmail.com
Forwarded: not-needed

Index: graphviz-2.20.2/tclpkg/gv/gv.i
===
--- graphviz-2.20.2.orig/tclpkg/gv/gv.i	2009-09-22 00:57:05.0 -0700
+++ graphviz-2.20.2/tclpkg/gv/gv.i	2009-09-22 00:57:21.0 -0700
@@ -15,6 +15,20 @@
 **/
 
 %module gv
+
+#ifdef SWIGTCL
+// A typemap telling SWIG to ignore an argument for input
+// However, we still need to pass a pointer to the C function
+%typemap(in,numinputs=0) char *outdata (char *temp) {
+ $1 = temp;
+}
+// A typemap defining how to return an argument by appending it to the result
+%typemap(argout) char *outdata {
+ Tcl_Obj *o = Tcl_NewStringObj($1);
+ Tcl_ListObjAppendElement(interp,$result,o);
+}
+#endif
+
 %{
 
 /* some language headers (e.g. php.h, ruby.h) leave these defined */
@@ -371,18 +385,4 @@
 extern bool write(Agraph_t *g, char *filename);
 extern bool write(Agraph_t *g, FILE *f);
 
-
-#ifdef SWIGTCL
-// A typemap telling SWIG to ignore an argument for input
-// However, we still need to pass a pointer to the C function
-%typemap(in,numinputs=0) char *outdata (char *temp) {
- $1 = temp;
-}
-// A typemap defining how to return an argument by appending it to the result
-%typemap(argout) char *outdata {
- Tcl_Obj *o = Tcl_NewStringObj($1);
- Tcl_ListObjAppendElement(interp,$result,o);
-}
-#endif
-
 %}
Description: use -php instead of -php5 with swig
Author: Ludovico Cavedon ludovico.cave...@gmail.com

Index: graphviz-2.20.2/tclpkg/gv/Makefile.am
===
--- graphviz-2.20.2.orig/tclpkg/gv/Makefile.am	2008-04-29 11:19:41.0 -0700
+++ graphviz-2.20.2/tclpkg/gv/Makefile.am	2009-09-22 01:36:54.0 -0700
@@ -131,7 +131,7 @@
 gv.php: gv_php.cpp
 php_gv.h: gv_php.cpp
 gv_php.cpp: gv.i
-	$(SWIG) -c++ -php5 -o gv_php.cpp $(srcdir)/gv.i
+	$(SWIG) -c++ -php -o gv_php.cpp $(srcdir)/gv.i
 
 pkgpythondir = $(pkglibdir)/python
 PYTHON_data = gv.py
Index: graphviz-2.20.2/tclpkg/gv/Makefile.in
===
--- graphviz-2.20.2.orig/tclpkg/gv/Makefile.in	2008-06-25 16:20:31.0 -0700
+++ graphviz-2.20.2/tclpkg/gv/Makefile.in	2009-09-22 01:36:54.0 -0700
@@ -2521,7 +2521,7 @@
 gv.php: gv_php.cpp
 php_gv.h: gv_php.cpp
 gv_php.cpp: gv.i
-	$(SWIG) -c++ -php5 -o gv_php.cpp $(srcdir)/gv.i
+	$(SWIG) -c++ -php -o gv_php.cpp $(srcdir)/gv.i
 $(PYTHON_data): gv_python.cpp
 gv_python.cpp: gv.i
 	$(SWIG) -c++ -python -o gv_python.cpp $(srcdir)/gv.i
Index: graphviz-2.20.2/configure
===
--- graphviz-2.20.2.orig/configure	2009-09-22 01:37:20.0 -0700
+++ graphviz-2.20.2/configure	2009-09-22 01:37:29.0 -0700
@@ -27290,8 +27290,8 @@
   if test x$use_swig != xYes; then
 use_php=No (swig not available)
   else
-if test `$SWIG -help 21 | $GREP -c '\-php5 *- Generate'` = 0; then
-  use_php=No (swig does not support -php5 option)
+if test `$SWIG -help 21 | $GREP -c '\-php *- Generate'` = 0; then
+  use_php=No (swig does not support -php option)
 else
   # Extract the first word of php, so it can be a program name with args.
 set dummy php; ac_word=$2
Index: graphviz-2.20.2/configure.ac
===
--- graphviz-2.20.2.orig/configure.ac	2009-09-22 01:37:03.0 -0700
+++ graphviz-2.20.2/configure.ac	2009-09-22 01:37:18.0 -0700
@@ -946,8 +946,8 @@
   if test x$use_swig != xYes; then
 use_php=No (swig not available)
   else
-if test `$SWIG -help 21 | $GREP -c '\-php5 *- Generate'` = 0; then
-  use_php=No (swig does not support -php5 option)
+if test `$SWIG -help 21 | $GREP -c '\-php *- Generate'` = 0; then
+  use_php=No (swig does not support -php option)
 else
   AC_CHECK_PROG(PHP,php,php)
   if test x$PHP = x; then

Bug#514220: ca-certificates: debconf update destroys local config

[Ludovico Cavedon]

Hi,
gdm can be run even without an X server (e.g. for remote login), so it
is not correct to have it depend on xorg server components.

It should rather recommend them, but I see it already recommends
xserver-xorg, which in turn depends on the mouse and keyboard drivers.

Are there reasons not to install xserver-xorg but still want to have
other pieces of the xserver? In that case we could add an explicit
Recommends: on these two packages, but not Depends.

My 2 cents,
Cheers,
Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#514220: ca-certificates: debconf update destroys local config

[Ludovico Cavedon]

Ludovico Cavedon wrote:
 gdm can be run even without an X server (e.g. for remote login), so it

Whops, sorry, wrong bug :(
Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#533724: gdm: missing dependency locks up keyboard/mouse

[Ludovico Cavedon]

Hi,
gdm can be run even without an X server (e.g. for remote login), so it
is not correct to have it depend on xorg server components.

It should rather recommend them, but I see it already recommends
xserver-xorg, which in turn depends on the mouse and keyboard drivers.

Are there reasons not to install xserver-xorg but still want to have
other pieces of the xserver? In that case we could add an explicit
Recommends: on these two packages, but not Depends.

My 2 cents,
Cheers,
Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#487638: opencv FTBFS

[Ludovico Cavedon]

Nicolau Werneck wrote:
 So let me list some facts, and please tell me if I forgot something,
 or if I got anything wrong:
 
 1_ The whole problem started because OpenCV uses some function in
 ffmpeg that became obsolete after i-don't-know-what version.

yes, opencv isusing the img_resample API that after at a while being
deprecated has been removed from the ffmpeg library. Applications should
use the swscale API instead. Unfortunately I do not know more details
about that :(

 3_ Debian has some restrictions regarding ffmpeg, and the official
 version has a number of relevant modifications from upstream. Many
 Debian users opt for the bootlegged ffmpeg package instead.

I do not think this is affecting opencv. official debian ffmpeg has been
removed of mpeg4-based encoders. The rest should be the same.

 4_ Everything should work fine with a certain Debian SVN version of
 ffmpeg and a certain other Debian OpenCV package.

Yes, a part from the fact that right know the build of opencv on sid
would fail because of the missing API.

Actually I realized that this is not a correct FTBFS. If you build the
package as is it will not fail. It will be build without video support
because the new version of ffmpeg changed the include paths. If you fix
the paths, *than* it will FTBFS because of the wrong API. I was to quick
in tagging it as FTBFS, feel free do reduce severity.

However without video support the package is useless for me, because I
am using it.

 What I still don't know exactly is:
 
 1_ Does any Debian package of ffmpeg already implement this new
 functions from ffmpeg, or are we still holding to the deprecated
 mechanism? Or are we keeping both by any chance?

I know qutecom, for example, had this problem and is now using the
swscale API for video.

 In other words: Does the Debian way today means using the deprecated
 functions (img_conv)? If so, when are we going to make the switch to
 the more recent mechanisms?

I think we need to patch opencv to use the new API. Looks like bug
487638 has a patch...

Thanks for the attention,
Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#521493: qutecom_2.2~rc3.dfsg1-4(hppa/experimental): FTBFS: error: invalid conversion from 'int' to 'PixelFormat'

[Ludovico Cavedon]

package qutecom
tags 521493 + confirmed pending
thanks

Yes, I know: during the wait time in the NEW queue, some incompatible
changes were made to ffmpeg :(
The new upload is ready.

Thanks,
Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#517147: wengophone: FTBFS: Could not find FFmpeg

[Ludovico Cavedon]

package: wengophone
tags 517147 + confirmed pending
thanks

Hi,
wengophone changed name into qutecom. The new package is sitting in the
NEW queue and will fix this problem. As soon as it gets accepted, I will
fire a bug for removal wengophone.

Thank you for reporting,
Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#517147: wengophone: FTBFS: Could not find FFmpeg

[Ludovico Cavedon]

package wengophone
tags 517147 + confirmed pending
thanks

Hi,
wengophone changed name into qutecom. The new package is sitting in the
NEW queue and will fix this problem. As soon as it gets accepted, I will
fire a bug for removal wengophone.

Thank you for reporting,
Ludovico



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#487540: [wengophone] qtwengophoen links against not fould shaored libraries.

[Ludovico Cavedon]

package wengophone
forcemerge 486948 487540
severity 486948 grave
thanks

Mazen NEIFER wrote:
 Now that wengophone package was upgraded, it could not find libphapi.so.
 [EMAIL PROTECTED]:trunk]$qtwengophone
 qtwengophone: error while loading shared libraries:
../../../../wifo/phapi/libphapi.so: cannot open shared object file: No
such file or directory

Yes, known problem :( , merging with bug #487540.

 I'm setting severity of the bug to grave as this is a dependency error
(needs to depend on a new package or require shared library name to be
updated).

I think severity is correct. Actually the shared library is in the same
package: the problem is that it is being searched in the wrong path :(
An upload will arrive shortly.

Thank you for reporting,
Ludovico



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#479920: wengophone: FTBFS: CMake Error: x11: X11_INCLUDE_DIRS and X11_INCLUDE_DIR empty, check that X11 is declared before x11

[Ludovico Cavedon]

Andreas Metzler wrote:
 adding  libx11-dev,  python2.5-dev to Build-Depends works  around the
 abovementioned bug. However building still fails when the application
 is linked

 [...]
 /tmp/WENGO/wengophone-2.1.2.dfsg0/wengophone/src/WengoPhoneBuildId.cpp:84: 
 undefined reference to `avcodec_version()'
 collect2: ld returned 1 exit status

Yes, it needs a patch in order to compile against the new ffmpeg.
I have the fix ready. It should be uploaded soon by Marco.

Thanks,
Ludovico



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#479920: wengophone: FTBFS: CMake Error: x11: X11_INCLUDE_DIRS and X11_INCLUDE_DIR empty, check that X11 is declared before x11

[Ludovico Cavedon]

Andreas Metzler wrote:
 adding  libx11-dev,  python2.5-dev to Build-Depends works  around the
 abovementioned bug. However building still fails when the application
 is linked

 [...]
 /tmp/WENGO/wengophone-2.1.2.dfsg0/wengophone/src/WengoPhoneBuildId.cpp:84: 
 undefined reference to `avcodec_version()'
 collect2: ld returned 1 exit status

Yes, it needs a patch in order to compile against the new ffmpeg.
I have the fix ready. It should be uploaded soon by Marco.

Thanks,
Ludovico



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#471385: Wengophone crashes whenever initiating a call

[Ludovico Cavedon]

package wengophone
tags 471385 + pending
thanks

On Tue, Mar 18, 2008 at 11:52 PM, Ludovico Cavedon
[EMAIL PROTECTED] wrote:
  Mazen NEIFER wrote:
   After starting Wengophone, just try to initiate a call (123 for example). 
 Then you will not be able to hear the message and when you will hangup it 
 will crash immediately.

  It started to happen to me too, after some library upgrade, I guess.

The code for managing alsa devices is quite buggy in the last stable
release. I imported the relvant code from branch 2.2 after the
refactoring done by Alec Leamas and the problem seems to be solved for
me.

An upload should come soon.

Regards,
Ludovico



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#471385: Wengophone crashes whenever initiating a call

[Ludovico Cavedon]

package wengophone
tags 471385 + confirmed
thanks

Mazen NEIFER wrote:
 After starting Wengophone, just try to initiate a call (123 for example). 
 Then you will not be able to hear the message and when you will hangup it 
 will crash immediately.

It started to happen to me too, after some library upgrade, I guess.

(debug) 22:44:12 void
PhoneCall::setState(EnumPhoneCallState::PhoneCallState): call state
changed callId=1 state=PhoneCallStateTalking
(info) 22:44:12 virtual bool PhApiWrapper::isCallEncrypted(int): Call
with callId 1 has encryption mode 0
(debug) 22:44:13 void QtPhoneCall::rejectCall(): phone call hangup

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x4580a950 (LWP 11790)]
0x2b8f5aacb951 in ?? () from /usr/lib/libasound.so.2
(gdb) bt
#0  0x2b8f5aacb951 in ?? () from /usr/lib/libasound.so.2
#1  0x2b8f5aaef0e1 in ?? () from /usr/lib/libasound.so.2
#2  0x2b8f5aac2ac6 in ?? () from /usr/lib/libasound.so.2
#3  0x2b8f5aacd232 in snd_pcm_mmap_writei () from
/usr/lib/libasound.so.2
#4  0x2b8f589477eb in alsa_stream_write (as=0x13c4e40,
buf=0x45809bb0, len=value optimized out) at
/build/buildd/wengophone-2.1.2.dfsg0/wifo/phapi/phmedia-alsa.c:450
#5  0x2b8f58940f7a in ph_audio_io_thread (p=value optimized out)
at /build/buildd/wengophone-2.1.2.dfsg0/wifo/phapi/phmedia-audio.c:898
#6  0x2b8f58992f24 in cgt_timer_thread (parg=value optimized out)
at
/build/buildd/wengophone-2.1.2.dfsg0/libs/timer/src/clock_gettime/impl_timer.c:122
#7  0x2b8f5a63efc7 in start_thread () from /lib/libpthread.so.0
#8  0x2b8f5c0f429d in clone () from /lib/libc.so.6
#9  0x in ?? ()

The backtrace is not exactly the same, but I think the cause is the
same, as it is happening at the same time. I find it particularly
difficult to debug, as I do not know much about programming with alsa.

Regards,
Ludovico




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#438419: CVE-2007-4366: WengoPhone DoS vulnerability

[Ludovico Cavedon]

package wengophone
tag 43841 + confirmed upstream
thanks

Luca Bruno wrote:

It looks like openwengo project hasn't yet released a patch, but they're
working on it:
http://dev.openwengo.com/pipermail/wengophone-devel/2007-August/006412.html


I also opened a ticket on openwengo trac: 
http://dev.openwengo.com/trac/openwengo/trac.fcgi/ticket/1759


Thank you for reporting,
Ludovico


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]