Your message dated Sat, 01 Aug 2015 03:34:57 +0000
with message-id <e1zlnzz-0008oo...@franck.debian.org>
and subject line Bug#794263: fixed in devscripts 2.15.7
has caused the Debian Bug report #794263,
regarding devscripts: licensecheck enters endless loop if last copyright line
ends with digit
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
794263: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794263
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: devscripts
Version: 2.15.6
Severity: important
Tags: patch
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Lines 373 onwards of licensecheck loops through potential copyright
lines. Line 377 does another loop within that, merging with next
potential copyright line if the line ends in digit (and maybe more).
That inner loop fails and loops endlessly if there are no more lines to
merge from.
A fix is to skip inner loop if on last line - i.e. change from this:
while ($copyright_match =~ /\d[,.]?\s*$/) {
to this:
while ( (@c) and $copyright_match =~ /\d[,.]?\s*$/ ) {
Current devscripts package causes ghostscript, and possibly other
packages, to FTBFS, thus raising to severity important.
- Jonas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=jPpM
-----END PGP SIGNATURE-----
--- End Message ---
--- Begin Message ---
Source: devscripts
Source-Version: 2.15.7
We believe that the bug you reported is fixed in the latest version of
devscripts, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 794...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
James McCoy <james...@debian.org> (supplier of updated devscripts package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 31 Jul 2015 22:50:33 -0400
Source: devscripts
Binary: devscripts
Architecture: source
Version: 2.15.7
Distribution: unstable
Urgency: medium
Maintainer: Devscripts Devel Team <devscripts-devel@lists.alioth.debian.org>
Changed-By: James McCoy <james...@debian.org>
Closes: 794260 794263 794282
Description:
devscripts - scripts to make the life of a Debian Package maintainer easier
Changes:
devscripts (2.15.7) unstable; urgency=medium
.
* licensecheck:
+ Use Dpkg::IPC to run file to avoid shell injection. (Closes: #794260)
+ Change whitelist of mime types to greylist of encodings. Restores
ability to check files with mime types like text/x-c++ and
application/postscript. Thanks to Jonas Smedegaard for the patch.
(Closes: #794282)
+ Fix an endless loop in parsing certain files. Thanks to Jonas
Smedegaard for the patch. (Closes: #794263)
Checksums-Sha1:
e1368f617e07f74cb0bcd41e6202ede27d42d784 2257 devscripts_2.15.7.dsc
4f01f5b1a9f118aebf66461adf46e0e830731f47 620100 devscripts_2.15.7.tar.xz
Checksums-Sha256:
daee3c021a6f44fe05e7568196c5eb55d34fbb6238f341a7fcf8443caa126ec5 2257
devscripts_2.15.7.dsc
7eadef203bc50612af70fb0047b5225a7f2b5fdaacd45c2df09126fcc1aed027 620100
devscripts_2.15.7.tar.xz
Files:
e5b6f0e0c29dca1b3f37f3713ec7e75a 2257 devel optional devscripts_2.15.7.dsc
1655e2c91e42cd48393c65726bc3faa9 620100 devel optional devscripts_2.15.7.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=4pg9
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/devscripts-devel
