[Android-tools-devel] Bug#1062110: android-libboringssl: identified for time_t transition but no ABI in shlibs

[Steve Langasek]

Package: android-libboringssl
Version: 14.0.0+r11-4
Severity: serious
User: debian-arm at lists.debian.org
Usertags: time-t

Hi Roger,

Analysis of the archive for the 64-bit time_t transition[0][1] identifies
android-libboringssl as a package shipping a library whose ABI changes on
32-bit architectures with 64-bit time_t.

However, android-libboringssl's shlibs file declares a dependency on a
library package name that contains no ABI information:

$ cat DEBIAN/shlibs
libcrypto 0 android-libboringssl (>= 14.0.0+r11)
libssl 0 android-libboringssl (>= 14.0.0+r11)
$

It is therefore not obvious that we should rename the package to
'android-libboringsslt64' as part of this transition.

Looking at the archive, there are packages built from separate source
packages, including adb and fastboot, that depend on this library.

Since there is no self-evident thing to do with the library package name
here, we will not be handling this package as part of the mass NMUs. 
Instead I am filing a serious bug because partial upgrades from bookworm to
trixie on 32-bit architectures (upgrading android-libboringssl without also
upgrading adb, fastboot, etc) will result in ABI skew and may result in
broken behavior.

Thanks,
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                   https://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org

[0] https://wiki.debian.org/ReleaseGoals/64bit-time
[1] https://lists.debian.org/debian-devel/2024/01/msg00041.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/android-tools-devel/attachments/20240131/e23e0339/attachment.sig>