Your message dated Sat, 08 Mar 2025 00:07:51 +0000 with message-id <e1tqhjl-003miv...@fasolo.debian.org> and subject line Bug#1098554: fixed in golang-github-gorilla-csrf 1.7.2+ds1-1 has caused the Debian Bug report #1098554, regarding golang-github-gorilla-csrf: FTBFS: fatal error: crypto/rand: failed to read random data (see https://go.dev/issue/66821): unexpected EOF to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 1098554: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098554 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: src:golang-github-gorilla-csrf Version: 1.7.2-1 Severity: serious Tags: ftbfs trixie sid Dear maintainer: During a rebuild of all packages in unstable, your package failed to build: -------------------------------------------------------------------------------- [...] debian/rules clean dh clean --builddirectory=_build --buildsystem=golang dh_auto_clean -O--builddirectory=_build -O--buildsystem=golang dh_autoreconf_clean -O--builddirectory=_build -O--buildsystem=golang dh_clean -O--builddirectory=_build -O--buildsystem=golang debian/rules binary dh binary --builddirectory=_build --buildsystem=golang dh_update_autotools_config -O--builddirectory=_build -O--buildsystem=golang dh_autoreconf -O--builddirectory=_build -O--buildsystem=golang dh_auto_configure -O--builddirectory=_build -O--buildsystem=golang dh_auto_build -O--builddirectory=_build -O--buildsystem=golang cd _build && go install -trimpath -v -p 2 github.com/gorilla/csrf internal/goarch internal/unsafeheader internal/cpu internal/abi internal/bytealg internal/byteorder internal/chacha8rand internal/coverage/rtcov internal/godebugs internal/goexperiment internal/goos internal/profilerecord internal/runtime/atomic internal/asan internal/msan internal/race internal/runtime/math internal/runtime/sys internal/runtime/exithook internal/runtime/syscall internal/runtime/maps internal/stringslite sync/atomic internal/sync math/bits internal/itoa math runtime unicode/utf8 unicode crypto/internal/fips140/alias crypto/internal/fips140deps/byteorder crypto/internal/fips140deps/cpu crypto/internal/fips140/subtle cmp crypto/internal/boring/sig encoding unicode/utf16 container/list vendor/golang.org/x/crypto/cryptobyte/asn1 vendor/golang.org/x/crypto/internal/alias internal/nettrace log/internal internal/reflectlite sync errors internal/bisect internal/oserror syscall internal/godebug io hash strconv time crypto iter bytes crypto/internal/fips140deps/godebug strings context crypto/internal/fips140 crypto/internal/impl crypto/internal/fips140/sha256 crypto/internal/fips140/sha3 crypto/internal/fips140/sha512 internal/syscall/unix path crypto/internal/fips140/hmac slices crypto/internal/fips140/check io/fs crypto/internal/fips140/aes internal/filepathlite internal/poll internal/syscall/execenv internal/testlog math/rand/v2 crypto/internal/randutil os crypto/subtle reflect crypto/internal/sysrand crypto/internal/entropy crypto/internal/fips140/drbg crypto/internal/fips140/aes/gcm crypto/internal/fips140only crypto/cipher crypto/internal/boring math/rand crypto/aes crypto/sha3 crypto/internal/fips140hash crypto/hmac internal/fmtsort encoding/binary fmt encoding/base64 crypto/sha256 bufio math/big internal/saferio maps encoding/gob crypto/rand encoding/json html path/filepath sort regexp/syntax github.com/gorilla/csrf/vendor/github.com/gorilla/securecookie regexp net/url text/template/parse compress/flate hash/crc32 compress/gzip text/template crypto/des crypto/internal/fips140/nistec/fiat crypto/internal/fips140/nistec html/template crypto/internal/fips140/edwards25519/field crypto/internal/boring/bbig crypto/internal/fips140/bigmod crypto/internal/fips140/ecdh crypto/ecdh crypto/elliptic crypto/internal/fips140/ecdsa crypto/sha512 encoding/asn1 crypto/internal/fips140/edwards25519 crypto/internal/fips140/ed25519 vendor/golang.org/x/crypto/cryptobyte crypto/ed25519 crypto/internal/fips140/hkdf crypto/internal/fips140/mlkem crypto/ecdsa crypto/internal/fips140/tls12 crypto/internal/fips140/tls13 vendor/golang.org/x/crypto/chacha20 vendor/golang.org/x/crypto/internal/poly1305 vendor/golang.org/x/sys/cpu crypto/md5 crypto/rc4 vendor/golang.org/x/crypto/chacha20poly1305 crypto/internal/fips140/rsa crypto/internal/hpke crypto/sha1 crypto/rsa crypto/tls/internal/fips140tls crypto/dsa encoding/hex crypto/x509/pkix encoding/pem vendor/golang.org/x/net/dns/dnsmessage internal/singleflight weak unique runtime/cgo net/netip vendor/golang.org/x/text/transform log vendor/golang.org/x/text/unicode/bidi vendor/golang.org/x/text/secure/bidirule vendor/golang.org/x/text/unicode/norm vendor/golang.org/x/net/idna vendor/golang.org/x/net/http2/hpack mime mime/quotedprintable net/http/internal net/http/internal/ascii net net/textproto crypto/x509 vendor/golang.org/x/net/http/httpguts vendor/golang.org/x/net/http/httpproxy mime/multipart crypto/tls net/http/httptrace net/http github.com/gorilla/csrf dh_auto_test -O--builddirectory=_build -O--buildsystem=golang cd _build && go test -vet=off -v -p 2 github.com/gorilla/csrf === RUN TestProtect --- PASS: TestProtect (0.00s) === RUN TestCookieOptions --- PASS: TestCookieOptions (0.00s) === RUN TestMethods --- PASS: TestMethods (0.00s) === RUN TestNoCookie --- PASS: TestNoCookie (0.00s) === RUN TestBadCookie --- PASS: TestBadCookie (0.00s) === RUN TestVaryHeader --- PASS: TestVaryHeader (0.00s) === RUN TestNoReferer --- PASS: TestNoReferer (0.00s) === RUN TestBadReferer --- PASS: TestBadReferer (0.00s) === RUN TestTrustedReferer --- PASS: TestTrustedReferer (0.00s) === RUN TestWithReferer --- PASS: TestWithReferer (0.00s) === RUN TestNoTokenProvided --- PASS: TestNoTokenProvided (0.00s) === RUN TestFormToken --- PASS: TestFormToken (0.00s) === RUN TestMultipartFormToken --- PASS: TestMultipartFormToken (0.00s) === RUN TestMaskUnmaskTokens --- PASS: TestMaskUnmaskTokens (0.00s) === RUN TestSameOrigin --- PASS: TestSameOrigin (0.00s) === RUN TestXOR --- PASS: TestXOR (0.00s) === RUN TestGenerateRandomBytes fatal error: crypto/rand: failed to read random data (see https://go.dev/issue/66821): unexpected EOF goroutine 36 [running]: crypto/rand.fatal({0xc0001412c0?, 0x85b18e?}) /usr/lib/go-1.24/src/runtime/panic.go:1038 +0x18 crypto/rand.Read({0xc0000d36a0?, 0x20, 0xad8b10?}) /usr/lib/go-1.24/src/crypto/rand/rand.go:79 +0xfb github.com/gorilla/csrf.generateRandomBytes(0x20) /<<PKGBUILDDIR>>/_build/src/github.com/gorilla/csrf/helpers.go:145 +0x37 github.com/gorilla/csrf.TestGenerateRandomBytes(0xc0001508c0) /<<PKGBUILDDIR>>/_build/src/github.com/gorilla/csrf/helpers_test.go:224 +0x94 testing.tRunner(0xc0001508c0, 0x862a28) /usr/lib/go-1.24/src/testing/testing.go:1792 +0xf4 created by testing.(*T).Run in goroutine 1 /usr/lib/go-1.24/src/testing/testing.go:1851 +0x413 goroutine 1 [chan receive]: testing.(*T).Run(0xc00008e700, {0x848837?, 0xc0000efb30?}, 0x862a28) /usr/lib/go-1.24/src/testing/testing.go:1859 +0x431 testing.runTests.func1(0xc00008e700) /usr/lib/go-1.24/src/testing/testing.go:2279 +0x37 testing.tRunner(0xc00008e700, 0xc0000efc70) /usr/lib/go-1.24/src/testing/testing.go:1792 +0xf4 testing.runTests(0xc0000a04b0, {0xb4e5e0, 0x1c, 0x1c}, {0xb9e2a0?, 0x7?, 0xb9cc60?}) /usr/lib/go-1.24/src/testing/testing.go:2277 +0x4b4 testing.(*M).Run(0xc0000f46e0) /usr/lib/go-1.24/src/testing/testing.go:2142 +0x64a main.main() _testmain.go:99 +0x9b FAIL github.com/gorilla/csrf 0.006s FAIL dh_auto_test: error: cd _build && go test -vet=off -v -p 2 github.com/gorilla/csrf returned exit code 1 make: *** [debian/rules:4: binary] Error 25 dpkg-buildpackage: error: debian/rules binary subprocess returned exit status 2 -------------------------------------------------------------------------------- The above is just how the build ends and not necessarily the most relevant part. If required, the full build log is available here: https://people.debian.org/~sanvila/build-logs/202502/ About the archive rebuild: The build was made on virtual machines from AWS, using sbuild and a reduced chroot with only build-essential packages. If you could not reproduce the bug please contact me privately, as I am willing to provide ssh access to a virtual machine where the bug is fully reproducible. If this is really a bug in one of the build-depends, please use reassign and add an affects on src:golang-github-gorilla-csrf, so that this is still visible in the BTS web page for this package. Thanks.
--- End Message ---
--- Begin Message ---Source: golang-github-gorilla-csrf Source-Version: 1.7.2+ds1-1 Done: Martina Ferrari <t...@debian.org> We believe that the bug you reported is fixed in the latest version of golang-github-gorilla-csrf, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1098...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Martina Ferrari <t...@debian.org> (supplier of updated golang-github-gorilla-csrf package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 07 Mar 2025 21:06:01 +0000 Source: golang-github-gorilla-csrf Architecture: source Version: 1.7.2+ds1-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg...@tracker.debian.org> Changed-By: Martina Ferrari <t...@debian.org> Closes: 1098554 Changes: golang-github-gorilla-csrf (1.7.2+ds1-1) unstable; urgency=medium . * Team upload. * Repack to exclude vendor/ from source package. * Add new patch to avoid non-recoverable panic in test. Closes: #1098554 * d/control: Bump Standards-Version (no changes). * Do not build examples, ship them as documentation. Checksums-Sha1: 5aee8f0a7bce15c84368158f2ba55dd89a5276ba 2304 golang-github-gorilla-csrf_1.7.2+ds1-1.dsc 4053237e1600c846ee763af481c93351c210132b 22692 golang-github-gorilla-csrf_1.7.2+ds1.orig.tar.xz f84d1d1af8287864e854cea43a9b9a11bc6c238c 3952 golang-github-gorilla-csrf_1.7.2+ds1-1.debian.tar.xz ed6819419e4bc520c86a8c13e70da36363cd6d7b 6180 golang-github-gorilla-csrf_1.7.2+ds1-1_amd64.buildinfo Checksums-Sha256: df4f06e9c27ac909cc7cddcec64d8494ebc29e2c63f8ed691584f246dfcae900 2304 golang-github-gorilla-csrf_1.7.2+ds1-1.dsc 6e1569995531e0446d3328d89939e3322dedc3d8f0cd7911e4f9896d03a0bb2b 22692 golang-github-gorilla-csrf_1.7.2+ds1.orig.tar.xz d243c9699e8a26071eb973b21a0236bb73039c05e8a73f00e28871799c3c845f 3952 golang-github-gorilla-csrf_1.7.2+ds1-1.debian.tar.xz 6f685005e0343287c66d5c7a76486cd9cb856ed07b31ecb476d3eaa313db8587 6180 golang-github-gorilla-csrf_1.7.2+ds1-1_amd64.buildinfo Files: 429e1f4eebdfc2886f7524fc1ff94a4c 2304 golang optional golang-github-gorilla-csrf_1.7.2+ds1-1.dsc 439cfa3b52bf841df27d364b2cdded98 22692 golang optional golang-github-gorilla-csrf_1.7.2+ds1.orig.tar.xz afe1e56862487090e0cccac54d816ff3 3952 golang optional golang-github-gorilla-csrf_1.7.2+ds1-1.debian.tar.xz a4ed706d3fb2ec5e377d3b2eed4e7b44 6180 golang optional golang-github-gorilla-csrf_1.7.2+ds1-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2qbv8cYn6hwmsaaSqiMPxF+MJ7EFAmfLX+4ACgkQqiMPxF+M J7E9gQ/8Cx/8+PhF9U2tNwbN7neMYKnxXdmjTL98eYZdB2KNYGOWAo0yVWSdJ6i/ 2zLgCEmJUwaoP8ij4NiS/n6NIGTWsfW/QI0zDRB2YKy3wWI0yco5uzlEYIoG5JqZ qabLScDqCnGFDqd4zZZ+vTJ2chJVVlsYbYFbs4KSTugt4G8JtGgsRSviUxPFfOEb g2ZtCsHf53zCiFjZA+jWZOC9BD7iUtipElReLvueH/XrF6IBi84Q3FP8KUSnHWAq 7PA34ZDwBDVcre1gpxil3RkAn8N2dMclurL8rNqFxjcAh6Ba3R5ykHq9nk5IPs/y Oov8qRtxLT3CAx8zY+J4qFoZ+3eBU8UVQ3ZLI5FEKf6eFroMoSnV+hyw7cI1eAr1 nMSS3+svtpq+H3iCj5fvhUQAeHG4RM9MY65kjOppYUdoMVbvAT3Xjb1GHv08wu7w g69nGJUlz8woAkbHnDyORqwT/WODjjGqmSnbFJz5mpvkSFuFU76HiSAxzDpwNb/r 9ScPxlNiYa1iRge9fqeC1WHLYFswSQxcKO3NIPikCR8IshfZoq5yVSQC55r6UvoH 35mn6ZvcxgAlGNHKhOFuVjdqKmCtIc8eZFsrAGG8DGCDftYu4ffwYDMTKaZz+IKy THEFFilzQGVEoJBfGRVLSkP0xkSffdeP2hDu3Ots9qEg0pPuH/c= =E49O -----END PGP SIGNATURE-----
pgpH7kvtBhakI.pgp
Description: PGP signature
--- End Message ---
