Package: src:golang-github-gorilla-csrf
Version: 1.7.2-1
Severity: serious
Tags: ftbfs trixie sid
Dear maintainer:
During a rebuild of all packages in unstable, your package failed to build:
--------------------------------------------------------------------------------
[...]
debian/rules clean
dh clean --builddirectory=_build --buildsystem=golang
dh_auto_clean -O--builddirectory=_build -O--buildsystem=golang
dh_autoreconf_clean -O--builddirectory=_build -O--buildsystem=golang
dh_clean -O--builddirectory=_build -O--buildsystem=golang
debian/rules binary
dh binary --builddirectory=_build --buildsystem=golang
dh_update_autotools_config -O--builddirectory=_build -O--buildsystem=golang
dh_autoreconf -O--builddirectory=_build -O--buildsystem=golang
dh_auto_configure -O--builddirectory=_build -O--buildsystem=golang
dh_auto_build -O--builddirectory=_build -O--buildsystem=golang
cd _build && go install -trimpath -v -p 2 github.com/gorilla/csrf
internal/goarch
internal/unsafeheader
internal/cpu
internal/abi
internal/bytealg
internal/byteorder
internal/chacha8rand
internal/coverage/rtcov
internal/godebugs
internal/goexperiment
internal/goos
internal/profilerecord
internal/runtime/atomic
internal/asan
internal/msan
internal/race
internal/runtime/math
internal/runtime/sys
internal/runtime/exithook
internal/runtime/syscall
internal/runtime/maps
internal/stringslite
sync/atomic
internal/sync
math/bits
internal/itoa
math
runtime
unicode/utf8
unicode
crypto/internal/fips140/alias
crypto/internal/fips140deps/byteorder
crypto/internal/fips140deps/cpu
crypto/internal/fips140/subtle
cmp
crypto/internal/boring/sig
encoding
unicode/utf16
container/list
vendor/golang.org/x/crypto/cryptobyte/asn1
vendor/golang.org/x/crypto/internal/alias
internal/nettrace
log/internal
internal/reflectlite
sync
errors
internal/bisect
internal/oserror
syscall
internal/godebug
io
hash
strconv
time
crypto
iter
bytes
crypto/internal/fips140deps/godebug
strings
context
crypto/internal/fips140
crypto/internal/impl
crypto/internal/fips140/sha256
crypto/internal/fips140/sha3
crypto/internal/fips140/sha512
internal/syscall/unix
path
crypto/internal/fips140/hmac
slices
crypto/internal/fips140/check
io/fs
crypto/internal/fips140/aes
internal/filepathlite
internal/poll
internal/syscall/execenv
internal/testlog
math/rand/v2
crypto/internal/randutil
os
crypto/subtle
reflect
crypto/internal/sysrand
crypto/internal/entropy
crypto/internal/fips140/drbg
crypto/internal/fips140/aes/gcm
crypto/internal/fips140only
crypto/cipher
crypto/internal/boring
math/rand
crypto/aes
crypto/sha3
crypto/internal/fips140hash
crypto/hmac
internal/fmtsort
encoding/binary
fmt
encoding/base64
crypto/sha256
bufio
math/big
internal/saferio
maps
encoding/gob
crypto/rand
encoding/json
html
path/filepath
sort
regexp/syntax
github.com/gorilla/csrf/vendor/github.com/gorilla/securecookie
regexp
net/url
text/template/parse
compress/flate
hash/crc32
compress/gzip
text/template
crypto/des
crypto/internal/fips140/nistec/fiat
crypto/internal/fips140/nistec
html/template
crypto/internal/fips140/edwards25519/field
crypto/internal/boring/bbig
crypto/internal/fips140/bigmod
crypto/internal/fips140/ecdh
crypto/ecdh
crypto/elliptic
crypto/internal/fips140/ecdsa
crypto/sha512
encoding/asn1
crypto/internal/fips140/edwards25519
crypto/internal/fips140/ed25519
vendor/golang.org/x/crypto/cryptobyte
crypto/ed25519
crypto/internal/fips140/hkdf
crypto/internal/fips140/mlkem
crypto/ecdsa
crypto/internal/fips140/tls12
crypto/internal/fips140/tls13
vendor/golang.org/x/crypto/chacha20
vendor/golang.org/x/crypto/internal/poly1305
vendor/golang.org/x/sys/cpu
crypto/md5
crypto/rc4
vendor/golang.org/x/crypto/chacha20poly1305
crypto/internal/fips140/rsa
crypto/internal/hpke
crypto/sha1
crypto/rsa
crypto/tls/internal/fips140tls
crypto/dsa
encoding/hex
crypto/x509/pkix
encoding/pem
vendor/golang.org/x/net/dns/dnsmessage
internal/singleflight
weak
unique
runtime/cgo
net/netip
vendor/golang.org/x/text/transform
log
vendor/golang.org/x/text/unicode/bidi
vendor/golang.org/x/text/secure/bidirule
vendor/golang.org/x/text/unicode/norm
vendor/golang.org/x/net/idna
vendor/golang.org/x/net/http2/hpack
mime
mime/quotedprintable
net/http/internal
net/http/internal/ascii
net
net/textproto
crypto/x509
vendor/golang.org/x/net/http/httpguts
vendor/golang.org/x/net/http/httpproxy
mime/multipart
crypto/tls
net/http/httptrace
net/http
github.com/gorilla/csrf
dh_auto_test -O--builddirectory=_build -O--buildsystem=golang
cd _build && go test -vet=off -v -p 2 github.com/gorilla/csrf
=== RUN TestProtect
--- PASS: TestProtect (0.00s)
=== RUN TestCookieOptions
--- PASS: TestCookieOptions (0.00s)
=== RUN TestMethods
--- PASS: TestMethods (0.00s)
=== RUN TestNoCookie
--- PASS: TestNoCookie (0.00s)
=== RUN TestBadCookie
--- PASS: TestBadCookie (0.00s)
=== RUN TestVaryHeader
--- PASS: TestVaryHeader (0.00s)
=== RUN TestNoReferer
--- PASS: TestNoReferer (0.00s)
=== RUN TestBadReferer
--- PASS: TestBadReferer (0.00s)
=== RUN TestTrustedReferer
--- PASS: TestTrustedReferer (0.00s)
=== RUN TestWithReferer
--- PASS: TestWithReferer (0.00s)
=== RUN TestNoTokenProvided
--- PASS: TestNoTokenProvided (0.00s)
=== RUN TestFormToken
--- PASS: TestFormToken (0.00s)
=== RUN TestMultipartFormToken
--- PASS: TestMultipartFormToken (0.00s)
=== RUN TestMaskUnmaskTokens
--- PASS: TestMaskUnmaskTokens (0.00s)
=== RUN TestSameOrigin
--- PASS: TestSameOrigin (0.00s)
=== RUN TestXOR
--- PASS: TestXOR (0.00s)
=== RUN TestGenerateRandomBytes
fatal error: crypto/rand: failed to read random data (see
https://go.dev/issue/66821): unexpected EOF
goroutine 36 [running]:
crypto/rand.fatal({0xc0001412c0?, 0x85b18e?})
/usr/lib/go-1.24/src/runtime/panic.go:1038 +0x18
crypto/rand.Read({0xc0000d36a0?, 0x20, 0xad8b10?})
/usr/lib/go-1.24/src/crypto/rand/rand.go:79 +0xfb
github.com/gorilla/csrf.generateRandomBytes(0x20)
/<<PKGBUILDDIR>>/_build/src/github.com/gorilla/csrf/helpers.go:145 +0x37
github.com/gorilla/csrf.TestGenerateRandomBytes(0xc0001508c0)
/<<PKGBUILDDIR>>/_build/src/github.com/gorilla/csrf/helpers_test.go:224
+0x94
testing.tRunner(0xc0001508c0, 0x862a28)
/usr/lib/go-1.24/src/testing/testing.go:1792 +0xf4
created by testing.(*T).Run in goroutine 1
/usr/lib/go-1.24/src/testing/testing.go:1851 +0x413
goroutine 1 [chan receive]:
testing.(*T).Run(0xc00008e700, {0x848837?, 0xc0000efb30?}, 0x862a28)
/usr/lib/go-1.24/src/testing/testing.go:1859 +0x431
testing.runTests.func1(0xc00008e700)
/usr/lib/go-1.24/src/testing/testing.go:2279 +0x37
testing.tRunner(0xc00008e700, 0xc0000efc70)
/usr/lib/go-1.24/src/testing/testing.go:1792 +0xf4
testing.runTests(0xc0000a04b0, {0xb4e5e0, 0x1c, 0x1c}, {0xb9e2a0?, 0x7?,
0xb9cc60?})
/usr/lib/go-1.24/src/testing/testing.go:2277 +0x4b4
testing.(*M).Run(0xc0000f46e0)
/usr/lib/go-1.24/src/testing/testing.go:2142 +0x64a
main.main()
_testmain.go:99 +0x9b
FAIL github.com/gorilla/csrf 0.006s
FAIL
dh_auto_test: error: cd _build && go test -vet=off -v -p 2
github.com/gorilla/csrf returned exit code 1
make: *** [debian/rules:4: binary] Error 25
dpkg-buildpackage: error: debian/rules binary subprocess returned exit status 2
--------------------------------------------------------------------------------
The above is just how the build ends and not necessarily the most relevant part.
If required, the full build log is available here:
https://people.debian.org/~sanvila/build-logs/202502/
About the archive rebuild: The build was made on virtual machines from AWS,
using sbuild and a reduced chroot with only build-essential packages.
If you could not reproduce the bug please contact me privately, as I
am willing to provide ssh access to a virtual machine where the bug is
fully reproducible.
If this is really a bug in one of the build-depends, please use
reassign and add an affects on src:golang-github-gorilla-csrf, so that this is
still
visible in the BTS web page for this package.
Thanks.
