[Debichem-devel] Bug#939033: qutemol: Uses GifQuantizeBuffer - stops working with newer giflib

Andreas Metzler ametzler at bebt.de
Sat Aug 31 12:23:59 BST 2019


Source: qutemol
Version: 0.4.1~cvs20081111-13
Severity: important

Hello,

this package uses GifQuantizeBuffer() from giflib. The symbol has been
dropped in giflib 5.2 (libgif-dev/libgif7 5.2.1 is available in
experimental) and therefore the package 
a) stops working when the gif library package is upgraded and
b) FTBFS against libgif-dev >= 5.2.

I do not think giflib did the right thing by dropping the symbol without
a soname bump but that is beside the point.[1] Even with the correct way
(giflib soname bump) this package FTBFS. I am quite confident that
GifQuantizeBuffer() will not be reintroduced - It was ripped out to
"reduce libgif size and attack surface".

I am reporting this /now/ with severity important, but please treat it
as rc issue.

cu Andreas

[1] I have suggested to upstream to do a soname bump. If this is not
accepted we will probably end up with newer libgif7 having a Breaks for
GifQuantizeBuffer()-using-software.

------------------------
g++ -g -O2 -fdebug-prefix-map=/dev/shm/GIFLIB/qutemol-0.4.1~cvs20081111=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -DPKGDATADIR='"/usr/share/qutemol/"' -Ivcg -Isrc -I. `wx-config --cppflags` -DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2  -c -o src/gifSave.o src/gifSave.cpp
src/gifSave.cpp: In member function 'bool GifWrapper::AddFrame(Byte*, int, int, float)':
src/gifSave.cpp:69:9: error: 'GifQuantizeBuffer' was not declared in this scope
   69 |     if (GifQuantizeBuffer(sx, sy, &paletteSize,
      |         ^~~~~~~~~~~~~~~~~
make[1]: *** [<builtin>: src/gifSave.o] Error 1
make[1]: Leaving directory '/dev/shm/GIFLIB/qutemol-0.4.1~cvs20081111'
dh_auto_build: make -j1 "INSTALL=install --strip-program=true" returned exit code 2
make: *** [debian/rules:8: binary] Error 255



More information about the Debichem-devel mailing list