Package: procps
Version: 1:3.2.5-1
Severity: serious

procps has the following code in its Makefile:

check_gcc = $(shell if $(CC) $(ALL_CPPFLAGS) $(ALL_CFLAGS) dummy.c 
$(ALL_LDFLAGS) $(1) -o /dev/null $(CURSES) > /dev/null 2>&1; then echo "$(1)"; 
else echo "$(2)"; fi ;)

There is a problem with this code: If run with root privileges
(e.g. by building the package with sudo) and the gcc call fails, gcc
will delete the output file, which is /dev/null.
(The package in incoming has the same code, in case you wonder about the
version number)

It would certainly be better to use a temporary file as destination.

High severity since at least the mips(el) buildds currently use sudo and
were hit by the problem.

Gruesse,
        Frank Lichtenheld

-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 
'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-k7
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)

Versions of packages procps depends on:
ii  libc6                         2.3.5-6    GNU C Library: Shared libraries an
ii  libncurses5                   5.4-9      Shared libraries for terminal hand

Versions of packages procps recommends:
ii  psmisc                        21.6-1     Utilities that use the proc filesy

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to