[Pkg-acpi-devel] Bug#653496: FTBS: Debian 6.0.3 - Security Fix - acpid_2.0.7-1squeeze3

Wed Dec 28 22:01:24 UTC 2011

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Package: acpid
Version: 2.0.7-1squeeze3
Severity: serious

Summary of issue:

FTBS: Debian 6.0.3 - Security Fix - acpid_2.0.7-1squeeze3

When trying to build Debian Security Fix acpid_2.0.7-1squeeze3
the following error occurred:

cc -W -Wall -Werror -Wundef -Wshadow -D_GNU_SOURCE -O2
- -fno-strict-aliasing -g -DVERSION="\"2.0.7\""   -c -o
libnetlink.o libnetlink.c cc1: warnings being treated as errors
libnetlink.c: In function ‘addraw_l’: libnetlink.c:521: error:
comparison between signed and unsigned integer expressions make
[1]: *** [libnetlink.o] Error 1 make[1]: Leaving directory
`/data/system/nc6400/debian/6.x.x-squeeze/SecurityUpdates/realtimestamps/acpid-2.0.7'
make: *** [build] Error 2 dpkg-buildpackage: error:
debian/rules build gave error exit status 2

The acpid_2.0.7-1squeeze3 source package failed to build for the
Debian 6.0.3 amd64 release target and therefore the security fix
binary Debian Security issued for Squeeze was not created from
the posted acpid_2.0.7-1squeeze3 source package.

The acpid_2.0.7-1squeeze3 Debian Security Fix needs to have the
above source build error corrected in a new version of the
source. Then the packages created from the revised source
package using the same base system as the source package is
targeting, i.e. official Debian 6.0.3 with the official
accumulated Debian Security fixes and no backports.

Environment Summary:

- - Debian 6.0.3-amd64 with some security fixes applied thus far.
- - HP NC6400 with 120GB hard drive and 4GB RAM

The following should enable a the issue to be recreated:

1) Install Debian 6.0.3 using the official amd64 DVD images, do
not run any updates or security updates after the base 6.0.3
install. This should be a development based install with a DE
of your choice.

2) Download the acpid_2.0.7-1squeeze3 source:

<http://security.debian.org/debian-security/pool/updates/main/a/acpid/acpid_2.0.7-1squeeze3.dsc>
<http://security.debian.org/debian-security/pool/updates/main/a/acpid/acpid_2.0.7.orig.tar.gz>
<http://security.debian.org/debian-security/pool/updates/main/a/acpid/acpid_2.0.7-1squeeze3.diff.gz>

3) Run the following commands from the directory where the
source of step (2) was downloaded to:

date ; time dpkg-source -x acpid_2.0.7-1squeeze3.dsc
cd acpid_2.0.7
date ; time dpkg-buildpackage -rfakeroot

4) If the newly installed system issues messages for build
tools, compiler, or package dependencies install what is
required only from the base Debian 6.0.3 DVDs.

Please note I have specifically stated the DVDs to install
from and NOT a the network, BluRay CD, or Live install media as
there may be differences in these images with respect to the DVD
image set via:

<http://cdimage.debian.org/debian-cd/6.0.3/amd64/iso-dvd/>

My system was installed from the DVD images of the above link.

This system has already compiled today and the last few days
with no issue:

pam_1.1.1-6.1+squeeze1.dsc
xorg_7.5+8+squeeze1.dsc
freetype_2.4.2-2.1+squeeze3.dsc
nss_3.12.8-1+squeeze4.dsc
linux-2.6_2.6.32-38.dsc
linux-2.6_2.6.32-39.dsc

A check was made to determine if a similar bug report exists via

http://bugs.debian.org/cgi-bin/pkgreport.cgi?package=acpi

"No reports found!"

Attached is the terminal session of bug and related diagnostic
information.

Regards,

John L. Males
Toronto, Ontario
Canada
28 December 2011 17:01

==============================================================
2011-12-28 16:00:05.089160350-0500-EST

28 Dec 16:00:05 ntpdate[29723]: ntpdate 4.2.6p2 at 1.2194-o Sun
Oct 17 13:35:14 UTC 2010 (1)

28 Dec 16:00:44 ntpdate[29728]: step time server 199.212.17.35
offset 0.009634 sec

Linux 2.6.32-5-amd64 #1 SMP Mon Oct 3 03:59:20 UTC 2011

Modified Debian GNU/Linux 6.0.3 (squeeze)
Planning, Upgrade, Modifications, Bug Reporting Work In
Progress from Highly modified Debian 4.x Etch

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAk77kbQACgkQ+V/XUtB6aBDOSQCglzm91x/aNbdKHEkhD81qHi/L
T04AoMArPDw0XD9iBoD88DqJB5X0He/z
=eVWz
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: acpid_2.0.7-1squeeze3.dsc-20111228-144532.console.gnometerminal.gedit.tar.bz2
Type: application/octet-stream
Size: 71513 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-acpi-devel/attachments/20111228/60822c7b/attachment-0001.obj>