Your message dated Wed, 28 Sep 2011 22:33:12 +0000
with message-id <e1r92gi-0005ea...@franck.debian.org>
and subject line Bug#643572: fixed in gnushogi 1.3.2-8
has caused the Debian Bug report #643572,
regarding gnushogi: FTBFS: book.c:296:13: error: format not a string literal
and no format arguments [-Werror=format-security]
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
643572: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=643572
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: gnushogi
Version: 1.3.2-7
Severity: serious
Tags: wheezy sid
User: debian...@lists.debian.org
Usertags: qa-ftbfs-20110923 qa-ftbfs hardening-format-security hardening
Justification: FTBFS on amd64
Hi,
During a rebuild of all packages in sid, your package failed to build on
amd64.
Relevant part:
> gcc -g -O2 -fstack-protector --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2
> -Wformat -Wformat-security -Werror=format-security -Wall -fsigned-char
> -funroll-loops -DHASHFILE=\"/usr/lib/gnushogi/gnushogi.hsh\" -Wall
> -Wno-implicit-int -Wstrict-prototypes -ansi -pedantic
> -I/build/gnushogi-i5HorX/gnushogi-1.3.2/. -I../ -I.
> -DBOOK=\"/usr/lib/gnushogi/gnushogi.tbk\"
> -DBINBOOK=\"/usr/lib/gnushogi/gnushogi.bbk\" -c
> /build/gnushogi-i5HorX/gnushogi-1.3.2/./gnushogi/book.c
> /build/gnushogi-i5HorX/gnushogi-1.3.2/./gnushogi/book.c: In function
> 'BVerifyMove':
> /build/gnushogi-i5HorX/gnushogi-1.3.2/./gnushogi/book.c:296:13: error: format
> not a string literal and no format arguments [-Werror=format-security]
> /build/gnushogi-i5HorX/gnushogi-1.3.2/./gnushogi/book.c: In function
> 'GetOpenings':
> /build/gnushogi-i5HorX/gnushogi-1.3.2/./gnushogi/book.c:652:20: warning:
> variable 'xside' set but not used [-Wunused-but-set-variable]
> /build/gnushogi-i5HorX/gnushogi-1.3.2/./gnushogi/book.c:707:18: warning:
> ignoring return value of 'write', declared with attribute warn_unused_result
> [-Wunused-result]
> /build/gnushogi-i5HorX/gnushogi-1.3.2/./gnushogi/book.c:713:22: warning:
> ignoring return value of 'write', declared with attribute warn_unused_result
> [-Wunused-result]
> /build/gnushogi-i5HorX/gnushogi-1.3.2/./gnushogi/book.c:748:29: warning:
> ignoring return value of 'write', declared with attribute warn_unused_result
> [-Wunused-result]
> /build/gnushogi-i5HorX/gnushogi-1.3.2/./gnushogi/book.c:786:45: warning:
> ignoring return value of 'write', declared with attribute warn_unused_result
> [-Wunused-result]
> /build/gnushogi-i5HorX/gnushogi-1.3.2/./gnushogi/book.c:834:21: warning:
> ignoring return value of 'write', declared with attribute warn_unused_result
> [-Wunused-result]
> /build/gnushogi-i5HorX/gnushogi-1.3.2/./gnushogi/book.c:843:13: warning:
> ignoring return value of 'write', declared with attribute warn_unused_result
> [-Wunused-result]
> /build/gnushogi-i5HorX/gnushogi-1.3.2/./gnushogi/book.c:847:13: warning:
> ignoring return value of 'write', declared with attribute warn_unused_result
> [-Wunused-result]
> cc1: some warnings being treated as errors
>
> make[2]: *** [book.o] Error 1
The full build log is available from:
http://people.debian.org/~lucas/logs/2011/09/23/gnushogi_1.3.2-7_lsid64.buildlog
This happened because since dpkg 1.16.0 [0], hardening flags are enabled
under various conditions.
[0] http://lists.debian.org/debian-devel-announce/2011/09/msg00001.html
A list of current common problems and possible solutions is available at
http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute!
About the archive rebuild: The rebuild was done on about 50 AMD64 nodes
of the Grid'5000 platform, using a clean chroot. Internet was not
accessible from the build systems.
--- End Message ---
--- Begin Message ---
Source: gnushogi
Source-Version: 1.3.2-8
We believe that the bug you reported is fixed in the latest version of
gnushogi, which is due to be installed in the Debian FTP archive:
gnuminishogi_1.3.2-8_amd64.deb
to main/g/gnushogi/gnuminishogi_1.3.2-8_amd64.deb
gnushogi_1.3.2-8.diff.gz
to main/g/gnushogi/gnushogi_1.3.2-8.diff.gz
gnushogi_1.3.2-8.dsc
to main/g/gnushogi/gnushogi_1.3.2-8.dsc
gnushogi_1.3.2-8_amd64.deb
to main/g/gnushogi/gnushogi_1.3.2-8_amd64.deb
xshogi_1.3.2-8_amd64.deb
to main/g/gnushogi/xshogi_1.3.2-8_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 643...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Yann Dirson <dir...@debian.org> (supplier of updated gnushogi package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 29 Sep 2011 00:15:34 +0200
Source: gnushogi
Binary: gnushogi gnuminishogi xshogi
Architecture: source amd64
Version: 1.3.2-8
Distribution: unstable
Urgency: low
Maintainer: Yann Dirson <dir...@debian.org>
Changed-By: Yann Dirson <dir...@debian.org>
Description:
gnuminishogi - program to play minishogi, a shogi variant on a 5x5 board
gnushogi - program to play shogi, the Japanese version of chess
xshogi - X11 frontend to gnushogi
Closes: 643572
Changes:
gnushogi (1.3.2-8) unstable; urgency=low
.
* Fixed Homepage field in debian/control, to point to the caltech site
which appears to be more reliable.
* Improve package short descriptions (lintian).
* New patch to deal with -Wformat-security (Closes: #643572):
22-format-string.patch.
* New set of patches to improve MiniShogi player and fix it with
some (read) buffer overflows which surely did not make it stronger.
Buffer overflow detected by hardening flags and induced all this work.
* Explicitly declare source format 1.0.
* Bumped Standards-Version to 3.9.2, no change.
Checksums-Sha1:
885bd0ab8b5a54e6fb134c594aa8928ae6a3dba6 1228 gnushogi_1.3.2-8.dsc
028386e91b74466e0706157eca64b0a793ddc0b7 34883 gnushogi_1.3.2-8.diff.gz
de0b43b0ec41dd5a97d854c1669fe093dccccc78 284986 gnushogi_1.3.2-8_amd64.deb
0992da42fc4e170c829ddcb9052d99f33d6740ec 98634 gnuminishogi_1.3.2-8_amd64.deb
0aeba12fa5f7494e0573c47eb089976be77a5c30 82906 xshogi_1.3.2-8_amd64.deb
Checksums-Sha256:
2d7f03cb790280bc3336fb9d46659984ef59950ad9962f20aa335f338d6a1932 1228
gnushogi_1.3.2-8.dsc
5126abb687d1a1e76092449ccf0df8562ec9c8dc11d523679ff091b9827a0674 34883
gnushogi_1.3.2-8.diff.gz
a16aee7fe1e3ebf723a4e2b40ffd577f31495e52c4fac63db7d4c6e2233119dd 284986
gnushogi_1.3.2-8_amd64.deb
7b3a7664a47e4ce71c290f6650f5f7a8aebd8e9fdc02da1f9c21685145b6abbc 98634
gnuminishogi_1.3.2-8_amd64.deb
c58977a2570633e046145904004d4c145dce4f098062c2dbbf942b4bb9f02f3d 82906
xshogi_1.3.2-8_amd64.deb
Files:
6e9809b8df9950b3fcccf017982d9107 1228 games optional gnushogi_1.3.2-8.dsc
2f42d1f27eda88379a677b193220794c 34883 games optional gnushogi_1.3.2-8.diff.gz
2908590740b3f3794e35d5202bd6516a 284986 games optional
gnushogi_1.3.2-8_amd64.deb
22b56e76ffa496156a123373c9bd28c9 98634 games optional
gnuminishogi_1.3.2-8_amd64.deb
a42c9410b376e12b79f65ec24ece7dcd 82906 games optional xshogi_1.3.2-8_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iD8DBQFOg510V1uVslwzwbgRAqx8AJ9iZ/s0pZ5VjvycBiKhc4MeU3pwsQCfcmWk
fjwDNew91LloCbITgYAUwdk=
=qbO9
-----END PGP SIGNATURE-----
--- End Message ---