On Thu, 30 Jan 2025, Sam Pinkus wrote: > On 29/1/25 06:41, Sebastian Andrzej Siewior wrote: >>> override_dh_update_autotools_config: >>> ./autogen.sh >> How is this different from the current autoreconf step that is >> already as part of dh?
Not effectively, other than being vulnerable to less well-thought-out upstream autogen.sh code. > The default update autotools dh rule doesn't seem to work / produce the same > result without the autogen assets already present in the package source. That’s irrelevant (and, in fact, highly desired, since the ones in Debian also patch in e.g. support for new architectures). Furthermore, >> Note that problem back then was that the shipped archived >> contained m4 files so the autogen step did not "help". the attack actually *relied* on doing so. bye, //mirabilos -- "Using Lynx is like wearing a really good pair of shades: cuts out the glare and harmful UV (ultra-vanity), and you feel so-o-o COOL." -- Henry Nelson, March 1999