Package: dash Version: 0.5.8-2.1 Severity: normal -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi, between 0.5.7 and 0.5.8, upstream introduced a change to dash that removes everything from the environment that does not look like a proper variable name: http://git.kernel.org/cgit/utils/dash/dash.git/commit/?id=46d3c1a614f11f0d40a7e73376359618ff07abcd Unfortunately, that breaks programs where a bash script exports a shell function to all subshells, when there is a call to '/bin/sh -c "..."' in between. This breaks the theorem prover Isabelle, as discussed in the thread at https://lists.cam.ac.uk/pipermail/cl-isabelle-users/2016-February/msg00097.html where upstream indicates that he plans to continue to rely on bash function exports working. Now dash upstream says this is not a problem because POSIX allows this change of behavior: http://www.mail-archive.com/dash@vger.kernel.org/msg01147.html This puts me, someone who wants people to be able to use Isabelle on Debian without hassles such as changing the /bin/sh symlink, in a hard place. The Isabelle upstream suggested raising the issue here as well, in case you happen to disagree with upstream’s assessment here and want to go a different path for Debian (although with my fellow Debian maintainer hat on, I don’t expect you to). Anyways, this way this is at least documented in the bugtracker. Greetings, Joachim - -- System Information: Debian Release: stretch/sid APT prefers buildd-unstable APT policy: (500, 'buildd-unstable'), (500, 'unstable'), (101, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.3.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages dash depends on: ii debianutils 4.7 ii dpkg 1.18.4 ii libc6 2.21-7 dash recommends no packages. dash suggests no packages. - -- debconf information: * dash/sh: true -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAla7iEcACgkQ9ijrk0dDIGxIhACgghsyhmuvHQjAahtGF5FHHhml kd8AoJY35n+DlVjVokHmaK2iQgObjWat =aKGZ -----END PGP SIGNATURE-----
