Bug#643427: marked as done (libidn2-0: FTBFS: idn2.c:161:5: error: format not a string literal and no format arguments [-Werror=format-security])

[Debian Bug Tracking System]

Your message dated Wed, 28 Sep 2011 19:03:20 +0000
with message-id <address@hidden>
and subject line Bug#643427: fixed in libidn2-0 0.8-1
has caused the Debian Bug report #643427,
regarding libidn2-0: FTBFS: idn2.c:161:5: error: format not a string literal 
and no format arguments [-Werror=format-security]
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact address@hidden
immediately.)


-- 
643427: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=643427
Debian Bug Tracking System
Contact address@hidden with problems
> --- Begin Message ---
>
>
>
> Subject: 
>
> libidn2-0: FTBFS: idn2.c:161:5: error: format not a string literal and no format arguments [-Werror=format-security]
>
>
>
>
> Date: 
>
> Tue, 27 Sep 2011 14:32:46 +0200
>
>
>
>
> User-agent: 
>
> Mutt/1.5.21 (2010-09-15)
>
>
>
>
> Source: libidn2-0
> Version: 0.7-6
> Severity: serious
> Tags: wheezy sid
> User: address@hidden
> Usertags: qa-ftbfs-20110923 qa-ftbfs hardening-format-security hardening
> Justification: FTBFS on amd64
>
> Hi,
>
> During a rebuild of all packages in sid, your package failed to build on
> amd64.
>
> Relevant part:
> > gcc -std=gnu99 -DHAVE_CONFIG_H -I.  -I. -I./.. -I./.. -I./../gl -I./../gl 
> > -I./gl -I./gl   -g -O2 -fstack-protector --param=ssp-buffer-size=4 
> > -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -Wall 
> > -c idn2.c
> > idn2.c: In function 'hexdump':
> > idn2.c:110:5: warning: pointer targets in passing argument 1 of 'strlen' 
> > differ in signedness [-Wpointer-sign]
> > /usr/include/string.h:399:15: note: expected 'const char *' but argument is 
> > of type 'uint8_t *'
> > idn2.c:116:3: warning: pointer targets in passing argument 1 of 
> > '__builtin_strlen' differ in signedness [-Wpointer-sign]
> > idn2.c:116:3: note: expected 'const char *' but argument is of type 'uint8_t 
> > *'
> > idn2.c:116:3: warning: pointer targets in passing argument 2 of 
> > '__builtin_strcmp' differ in signedness [-Wpointer-sign]
> > idn2.c:116:3: note: expected 'const char *' but argument is of type 'uint8_t 
> > *'
> > idn2.c:116:3: warning: pointer targets in passing argument 2 of 
> > '__builtin_strcmp' differ in signedness [-Wpointer-sign]
> > idn2.c:116:3: note: expected 'const char *' but argument is of type 'uint8_t 
> > *'
> > idn2.c:116:3: warning: pointer targets in passing argument 1 of 
> > '__builtin_strlen' differ in signedness [-Wpointer-sign]
> > idn2.c:116:3: note: expected 'const char *' but argument is of type 'uint8_t 
> > *'
> > idn2.c:116:3: warning: pointer targets in passing argument 2 of 
> > '__builtin_strcmp' differ in signedness [-Wpointer-sign]
> > idn2.c:116:3: note: expected 'const char *' but argument is of type 'uint8_t 
> > *'
> > idn2.c:116:3: warning: pointer targets in passing argument 2 of 
> > '__builtin_strcmp' differ in signedness [-Wpointer-sign]
> > idn2.c:116:3: note: expected 'const char *' but argument is of type 'uint8_t 
> > *'
> > idn2.c:117:5: warning: pointer targets in passing argument 1 of 'strlen' 
> > differ in signedness [-Wpointer-sign]
> > /usr/include/string.h:399:15: note: expected 'const char *' but argument is 
> > of type 'uint8_t *'
> > idn2.c: In function 'main':
> > idn2.c:136:3: warning: statement with no effect [-Wunused-value]
> > idn2.c:137:3: warning: statement with no effect [-Wunused-value]
> > idn2.c:161:5: error: format not a string literal and no format arguments 
> > [-Werror=format-security]
> > idn2.c:179:4: error: format not a string literal and no format arguments 
> > [-Werror=format-security]
> > cc1: some warnings being treated as errors
> > 
> > make[5]: *** [idn2.o] Error 1
>
> The full build log is available from:
>    
> http://people.debian.org/~lucas/logs/2011/09/23/libidn2-0_0.7-6_lsid64.buildlog
>
> This happened because since dpkg 1.16.0 [0], hardening flags are enabled 
> under various conditions.
>
> [0] http://lists.debian.org/debian-devel-announce/2011/09/msg00001.html
>
> A list of current common problems and possible solutions is available at 
> http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute!
>
> About the archive rebuild: The rebuild was done on about 50 AMD64 nodes
> of the Grid'5000 platform, using a clean chroot.  Internet was not
> accessible from the build systems.
>
>
>
> --- End Message ---
> --- Begin Message ---
>
>
>
> Subject: 
>
> Bug#643427: fixed in libidn2-0 0.8-1
>
>
>
>
> Date: 
>
> Wed, 28 Sep 2011 19:03:20 +0000
>
>
>
>
> Source: libidn2-0
> Source-Version: 0.8-1
>
> We believe that the bug you reported is fixed in the latest version of
> libidn2-0, which is due to be installed in the Debian FTP archive:
>
> idn2_0.8-1_amd64.deb
>   to main/libi/libidn2-0/idn2_0.8-1_amd64.deb
> libidn2-0-dbg_0.8-1_amd64.deb
>   to main/libi/libidn2-0/libidn2-0-dbg_0.8-1_amd64.deb
> libidn2-0-dev_0.8-1_amd64.deb
>   to main/libi/libidn2-0/libidn2-0-dev_0.8-1_amd64.deb
> libidn2-0_0.8-1.debian.tar.gz
>   to main/libi/libidn2-0/libidn2-0_0.8-1.debian.tar.gz
> libidn2-0_0.8-1.dsc
>   to main/libi/libidn2-0/libidn2-0_0.8-1.dsc
> libidn2-0_0.8-1_amd64.deb
>   to main/libi/libidn2-0/libidn2-0_0.8-1_amd64.deb
> libidn2-0_0.8.orig.tar.gz
>   to main/libi/libidn2-0/libidn2-0_0.8.orig.tar.gz
>
>
>
> A summary of the changes between this version and the previous one is
> attached.
>
> Thank you for reporting the bug, which will now be closed.  If you
> have further comments please address them to address@hidden,
> and the maintainer will reopen the bug report if appropriate.
>
> Debian distribution maintenance software
> pp.
> Simon Josefsson <address@hidden> (supplier of updated libidn2-0 package)
>
> (This message was generated automatically at their request; if you
> believe that there is a problem with it please contact the archive
> administrators by mailing address@hidden)
>
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Format: 1.8
> Date: Wed, 28 Sep 2011 20:39:19 +0200
> Source: libidn2-0
> Binary: libidn2-0 libidn2-0-dev libidn2-0-dbg idn2
> Architecture: source amd64
> Version: 0.8-1
> Distribution: unstable
> Urgency: low
> Maintainer: Debian Libidn2 team <address@hidden>
> Changed-By: Simon Josefsson <address@hidden>
> Description: 
>  idn2       - Internationalized domain names (IDNA2008) command line tool
>  libidn2-0  - Internationalized domain names (IDNA2008) library
>  libidn2-0-dbg - Internationalized domain names (IDNA2008) debug symbols
>  libidn2-0-dev - Internationalized domain names (IDNA2008) development files
> Closes: 643427
> Changes: 
>  libidn2-0 (0.8-1) unstable; urgency=low
>  .
>    * New upstream version.
>      - Fix build warnings. (Closes: #643427)
>    * Use DEB_COMPRESS_EXCLUDE_DEFAULT instead of
>      deprecated DEB_COMPRESS_EXCLUDE.
> Checksums-Sha1: 
>  1fd4e414b53a073f669f3297b0996c7ce302b367 1654 libidn2-0_0.8-1.dsc
>  b0a353dc68358a95c3bd45dfd95220a27664e6b9 1497729 libidn2-0_0.8.orig.tar.gz
>  e34ffd8284ec417776a451a5a47719acd4f2c775 3905 libidn2-0_0.8-1.debian.tar.gz
>  5fe3468124b5497d2ba46f351580a84e60329a38 88166 libidn2-0_0.8-1_amd64.deb
>  4073668d47d828cdd00ef72c4e019eec224f3f4c 302980 libidn2-0-dev_0.8-1_amd64.deb
>  0de8cdb5acdb16ca1a18125799aee13ac75f8208 112796 libidn2-0-dbg_0.8-1_amd64.deb
>  92744282980c419c1689e58d4d68c5268ef27fc5 40856 idn2_0.8-1_amd64.deb
> Checksums-Sha256: 
>  858af413f3e87e5c92f8e81ac1b25d13ef1c54d1e0c8382fe0ac98b773340ae9 1654 
> libidn2-0_0.8-1.dsc
>  554f729b290922956f833b7752a28c4f194c8caa7323a933edd3fdbc792b00dd 1497729 
> libidn2-0_0.8.orig.tar.gz
>  659832065e2016f4cc76a5e91530ad94242759bb283c663aa978fd2824f564a0 3905 
> libidn2-0_0.8-1.debian.tar.gz
>  e4c4b3fa6be6b8e092109c08cfb29ecd1051ff007a61c61bceb2313138d2ed31 88166 
> libidn2-0_0.8-1_amd64.deb
>  3237bb9a9e7823bb3f41c959ffd00551bdf4e2e8a97e440d9ae543c4c760d24c 302980 
> libidn2-0-dev_0.8-1_amd64.deb
>  8f027dc059ccf791efe059241ce49f14b370fa992a0a387fcf08c598a32ec894 112796 
> libidn2-0-dbg_0.8-1_amd64.deb
>  606941c1bc4cc85b6421f37d42a26bed2d5dd64fd22a7e4f00fae3607de8c376 40856 
> idn2_0.8-1_amd64.deb
> Files: 
>  1ec581d2786bfacf22dbd9c57b65157d 1654 libs extra libidn2-0_0.8-1.dsc
>  07b6a0ac077dd26d9829e59f22bdb42f 1497729 libs extra libidn2-0_0.8.orig.tar.gz
>  7453c4cafa49330a961ccf30392b8af6 3905 libs extra libidn2-0_0.8-1.debian.tar.gz
>  8889ed64d145b28e95a06cb774dae967 88166 libs extra libidn2-0_0.8-1_amd64.deb
>  45c618111565110db43e0459f472db4c 302980 libdevel extra 
> libidn2-0-dev_0.8-1_amd64.deb
>  94b78b040a044df394d5c24f553ed7b4 112796 debug extra 
> libidn2-0-dbg_0.8-1_amd64.deb
>  c0914d5b8bb14496c93e01965f615016 40856 devel extra idn2_0.8-1_amd64.deb
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
>
> iO4EAQECADgFAk6DbbsxFIAAAAAAFQATcGthLWFkZHJlc3NAZ251cGcub3Jnc2lt
> b25Aam9zZWZzc29uLm9yZwAKCRDtoh6UtWVxb3JGBP9GDBLwum2MVmjR4l+CmsBS
> MuqSHtVpmc/bo4aJ7AMK+0gcygmm3+SoyemlKM/87Xfvu/S1/NwG4hUPvx+D152b
> 9tS2nBGrvyTBYO1m6ov1nmUj4cqsa8xeAdyopQNqEE6dxU0DlZk15rgPuPDbCP/v
> AtC+hmDUp2aCyFHnwjrPPPOSMGPPWT7Ktqvz6VXM99Xlx3mimUGelMb0Q3nQG+Mq
> =G/Aj
> -----END PGP SIGNATURE-----
>
>
>
> --- End Message ---