On Thu, 30 Jan 2025, Sam Pinkus wrote:
> On 29/1/25 06:41, Sebastian Andrzej Siewior wrote:
>>>    override_dh_update_autotools_config:
>>>         ./autogen.sh
>> How is this different from the current autoreconf step that is
>> already as part of dh?

Not effectively, other than being vulnerable to less well-thought-out
upstream autogen.sh code.

> The default update autotools dh rule doesn't seem to work / produce the same
> result without the autogen assets already present in the package source.

That’s irrelevant (and, in fact, highly desired, since the ones in
Debian also patch in e.g. support for new architectures). Furthermore,

>> Note that problem back then was that the shipped archived
>> contained m4 files so the autogen step did not "help".

the attack actually *relied* on doing so.

bye,
//mirabilos
-- 
  "Using Lynx is like wearing a really good pair of shades: cuts out
   the glare and harmful UV (ultra-vanity), and you feel so-o-o COOL."
                                         -- Henry Nelson, March 1999

Reply via email to