Hi Milan, hi Michael,

Am 09.10.2016 um 20:55 schrieb Michael Stapelberg:
> [+cc mejo, who did the upload in question]

Thanks for Cc'ing me.

> Looking into
> http://security.debian.org/debian-security/pool/updates/main/libt/libtomcrypt/libtomcrypt_1.17-3.2+deb7u1.diff.gz,
> I see debian/rules contains this line:
> 
> +CFLAGS += -DGMP_DESC -DLTM_DESC -DUSE_LTM
> 
> So the flag seems to be set accordingly.
> 
> Not quite sure what’s wrong here.

Indeed, the LTM_DESC flag is set at compile time. The 1.17-3.2+deb7u1
upload should not have changed anything here.

Milan, do you have an example code snippet to reproduce the bug?

Cheers,
 jonas

> On Thu, Sep 22, 2016 at 10:52 AM, Milan Budala <milan.bud...@gmail.com
> <mailto:milan.bud...@gmail.com>> wrote:
> 
>     Package: libtomcrypt-dev
>     Version: 1.17-3.2+deb7u1
>     Severity: important
> 
>     Security update 1.17-3.2+deb7u1 breaks libtommath integration
>     ('undefined reference to ltm_desc' linking error).
>     No problems with version 1.17-3.2. The build should probably define
>     LTM_DESC.
> 
>     -- System Information:
>     Debian Release: 7.11
>       APT prefers oldstable-updates
>       APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
>     Architecture: amd64 (x86_64)
> 
>     Kernel: Linux 3.18.17-core2-rt14 (SMP w/1 CPU core; PREEMPT)
>     Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
>     Shell: /bin/sh linked to /bin/dash
> 
>     Versions of packages libtomcrypt-dev depends on:
>     ii  libtomcrypt0  1.17-3.2+deb7u1
> 
>     libtomcrypt-dev recommends no packages.
> 
>     libtomcrypt-dev suggests no packages.
> 
>     -- no debconf information
> 
> 
> 
> 
> -- 
> Best regards,
> Michael


Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to