Package: devscripts
Version: 2.10.64
Severity: grave
Justification: causes non-serious data loss

debsnap's manpage says the reason it insists the destination directory
doesn't exist yet is "to avoid files being accidentally overwritten by
what is fetched from the archive".  However:

if (-d $destdir) {
    if ($force_actions) {
        my $verbose = 1 if $config_vars{DEBSNAP_VERBOSE} eq 'yes';
        remove_tree($destdir, { verbose => $verbose });
        mkdir($destdir);
    }
    else {
        fatal "Destination dir $destdir already exists.\nPlease (re)move it 
first, or use --force to overwrite.";
    }
}
else {
    mkdir($destdir);
}

This deletes the destination directory and all its contents, even though
nothing in there might have been "accidentally overwritten".  This is
utterly insane, and severely undocumented.

Good thing all I've lost (AFAIK...) are git trees that are mirrored on
git.d.o...

Cheers,
Julien


-- Package-specific info:

--- /etc/devscripts.conf ---

--- ~/.devscripts ---
DEBCHANGE_RELEASE_HEURISTIC=changelog
USCAN_SYMLINK=rename
DEBCHANGE_AUTO_NMU=no
DEBCHANGE_MULTIMAINT_MERGE=yes
DEBSIGN_KEYID=0905E40C

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (101, 
'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages devscripts depends on:
ii  dpkg-dev                      1.15.7.2   Debian package development tools
ii  libc6                         2.11.2-2   Embedded GNU C Library: Shared lib
ii  perl                          5.10.1-13  Larry Wall's Practical Extraction 

Versions of packages devscripts recommends:
ii  at                3.1.12-1               Delayed job execution and batch pr
ii  bsd-mailx [mailx] 8.1.2-0.20100314cvs-1  simple mail user agent
ii  bzr               2.1.2-1                easy to use distributed version co
ii  curl              7.21.0-1               Get a file from an HTTP, HTTPS or 
ii  cvs               1:1.12.13-12           Concurrent Versions System
ii  darcs             2.4.4-1                a distributed, interactive, smart 
ii  dctrl-tools       2.14                   Command-line tools to process Debi
ii  debian-keyring [d 2010.06.08             GnuPG (and obsolete PGP) keys of D
ii  dput              0.9.6                  Debian package upload tool
ii  epiphany-browser  2.30.2-2               Intuitive GNOME web browser
ii  equivs            2.0.8                  Circumvent Debian package dependen
ii  fakeroot          1.14.4-1               Gives a fake root environment
ii  git [git-core]    1:1.7.1-1              fast, scalable, distributed revisi
ii  git-core          1:1.7.1-1              fast, scalable, distributed revisi
ii  gnupg             1.4.10-4               GNU privacy guard - a free PGP rep
ii  heirloom-mailx [m 12.4-2                 feature-rich BSD mail(1)
ii  iceweasel [www-br 3.5.10-1               Web browser based on Firefox
ii  libauthen-sasl-pe 2.1500-1               Authen::SASL - SASL Authentication
ii  libcrypt-ssleay-p 0.57-2                 Support for https protocol in LWP
ii  libjson-perl      2.21-1                 Perl module to parse and convert t
ii  libparse-debcontr 2.005-2                Easy OO parsing of Debian control-
ii  libsoap-lite-perl 0.712-1                Perl implementation of a SOAP clie
ii  libterm-size-perl 0.2-4+b1               Perl extension for retrieving term
ii  libtimedate-perl  1.2000-1               collection of modules to manipulat
ii  liburi-perl       1.54-1                 module to manipulate and access UR
ii  libwww-perl       5.836-1                Perl HTTP/WWW client/server librar
ii  libyaml-syck-perl 1.09-1                 Perl module providing a fast, ligh
ii  lintian           2.4.2                  Debian package checker
ii  lsb-release       3.2-23.1               Linux Standard Base version report
ii  lynx-cur [www-bro 2.8.8dev.4-1           Text-mode WWW Browser with NLS sup
ii  lzma              4.43-14                Compression method of 7z format in
ii  man-db            2.5.7-3                on-line manual pager
ii  mercurial         1.5.4-2                scalable distributed version contr
ii  openssh-client [s 1:5.5p1-4              secure shell (SSH) client, for sec
ii  patch             2.6-2                  Apply a diff file to an original
ii  patchutils        0.3.1-2                Utilities to work with patches
ii  sensible-utils    0.0.4                  Utilities for sensible alternative
ii  strace            4.5.20-2               A system call tracer
ii  subversion        1.6.12dfsg-1           Advanced version control system
ii  unzip             6.0-4                  De-archiver for .zip files
ii  w3m [www-browser] 0.5.2-4                WWW browsable pager with excellent
ii  wdiff             0.6.3-1                Compares two files word by word
ii  wget              1.12-2                 retrieves files from the web
ii  xz-utils          4.999.9beta+20100527-1 XZ-format compression utilities

Versions of packages devscripts suggests:
ii  build-essential               11.5       Informational list of build-essent
pn  cvs-buildpackage              <none>     (no description available)
pn  devscripts-el                 <none>     (no description available)
pn  gnuplot                       <none>     (no description available)
pn  libfile-desktopentry-perl     <none>     (no description available)
pn  libnet-smtp-ssl-perl          <none>     (no description available)
ii  mutt                          1.5.20-9   text-based mailreader supporting M
ii  svn-buildpackage              0.8.1      helper programs to maintain Debian
ii  w3m                           0.5.2-4    WWW browsable pager with excellent

-- no debconf information

Attachment: signature.asc
Description: Digital signature

Reply via email to