Control: reassign -1 src:haskell-shell-conduit/4.6.1-2 Control: retitle -1 Captures names of unrelated installed binaries at the build time
On Sun, Jan 14, 2018 at 08:11:57PM +0100, Helmut Grohne wrote: > /usr/bin/tldr-hs contains badblocks, chattr, debugfs, dumpe2fs, e2freefrag, > e2fsck, e2image, e2label, e2undo, e4crypt, e4defrag, filefrag, fsck.ext2, > fsck.ext3, fsck.ext4, logsave, lsattr, mke2fs, mkfs.ext2, mkfs.ext3, > mkfs.ext4, mklost+found, resize2fs and tune2fs. According to file it is a ELF > 64-bit LSB executable, x86-64, version 1 (SYSV) It's from libHSshell-conduit, and other haskell packages may have the same false positive because of it. $ fgrep e2freefrag /usr/lib/haskell-packages -r Binary file /usr/lib/haskell-packages/ghc/lib/x86_64-linux-ghc-8.0.2/shell-conduit-4.6.1-3HUpQGKyfpI2mFN77vEno1/Data/Conduit/Shell/PATH.dyn_hi matches Binary file /usr/lib/haskell-packages/ghc/lib/x86_64-linux-ghc-8.0.2/shell-conduit-4.6.1-3HUpQGKyfpI2mFN77vEno1/Data/Conduit/Shell/PATH.hi matches Binary file /usr/lib/haskell-packages/ghc/lib/x86_64-linux-ghc-8.0.2/shell-conduit-4.6.1-3HUpQGKyfpI2mFN77vEno1/Data/Conduit/Shell.dyn_hi matches Binary file /usr/lib/haskell-packages/ghc/lib/x86_64-linux-ghc-8.0.2/shell-conduit-4.6.1-3HUpQGKyfpI2mFN77vEno1/Data/Conduit/Shell.hi matches Binary file /usr/lib/haskell-packages/ghc/lib/x86_64-linux-ghc-8.0.2/shell-conduit-4.6.1-3HUpQGKyfpI2mFN77vEno1/libHSshell-conduit-4.6.1-3HUpQGKyfpI2mFN77vEno1.a matches Binary file /usr/lib/haskell-packages/ghc/lib/x86_64-linux-ghc-8.0.2/libHSshell-conduit-4.6.1-3HUpQGKyfpI2mFN77vEno1-ghc8.0.2.so matches Even better: /usr/share/doc/libghc-shell-conduit-doc/html/mini_Data-Conduit-Shell-PATH.html It seems the package captures everything in $PATH or something like that and generates functions (?) for all binaries it finds. Of course this is very non-reproducible and potentially leaks interesting things about the build system and at the same time I doubt this is useful (though I don't understand how is it used). -- WBR, wRAR
signature.asc
Description: PGP signature
