Bug#638045: Also affects sendmail

[Steve Langasek]

On Fri, Aug 19, 2011 at 09:43:30AM +0200, Ondřej Surý wrote:
> affects 638045 +sendmail
> thank you

> sorry for the breakage, it seems that I was too fast in uploading the
> MultiArch cyrus-sasl2.

> Steve, I guess you also have the patch for sendmail?

Sorry, I do not.  I had found the postfix bug because I use postfix myself,
so caught the regression; I didn't expect other sasl2 consumers to have the
same bug.  Now that we've found two, we should check all the cyrus-sasl2
reverse depends for buggy SASL_CB_GETPATH callbacks.

Here's a preliminary attempt to find all candidate packages in Ubuntu.

$ for pkg in $(zcat /mirror/ubuntu/dists/oneiric/*/binary-i386/Packages.gz \
               | grep-dctrl -FDepends libsasl2-2 -sSource:Package -n | sort -u)
  do
    source=$(zcat /mirror/ubuntu/dists/oneiric/*/source/Sources.gz \
             | grep-dctrl -FPackage -X $pkg \
             | awk '/Directory:/ { dir = $NF }; /\.dsc$/ { print dir "/" $NF; exit }')
    dpkg-source -x ~/ubuntu/$source > /dev/null 2>&1
    (cd ${pkg}-* && ./debian/rules unpack >/dev/null 2>&1)
    grep -rq SASL_CB_GETPATH . && echo $pkg
    rm -r ${pkg}*
  done

Unfortunately I don't have a full local source mirror with a suitable set of
dev tools installed, so several packages may have nested tarballs that don't
get unpacked (in fact, this query fails to find sendmail for me), but here
is a list of candidates I did find:

 ptlib
 ptlib-wolf
 pwlib

As it happens, each of these are libraries that *reexport* an interface for
setting the SASL path, so I guess there's more digging to be done there as
well.

> Or should I just remove the MultiArch patch, we open bugs in postfix and
> sendmail and block the MultiArch in cyrus-sasl2 untill the postfix and
> sendmail is ready?

I think that's your call as the maintainer.  I wouldn't like these bugs to
sit around too long unfiled, in any case - and we need to get them fixed for
the Ubuntu release before too long as well.  So it might be a week or two
before we have these all fixed, but no longer.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 828 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-cyrus-sasl2-debian-devel/attachments/20110819/32dd27f2/attachment.pgp>