Bug#887299: tldr should depend on e2fsprogs explicitly

Andrey Rahmatullin wrar at debian.org
Mon Jan 15 17:21:33 UTC 2018


Control: reassign -1 src:haskell-shell-conduit/4.6.1-2
Control: retitle -1 Captures names of unrelated installed binaries at the build time

On Sun, Jan 14, 2018 at 08:11:57PM +0100, Helmut Grohne wrote:
> /usr/bin/tldr-hs contains badblocks, chattr, debugfs, dumpe2fs, e2freefrag, e2fsck, e2image, e2label, e2undo, e4crypt, e4defrag, filefrag, fsck.ext2, fsck.ext3, fsck.ext4, logsave, lsattr, mke2fs, mkfs.ext2, mkfs.ext3, mkfs.ext4, mklost+found, resize2fs and tune2fs. According to file it is a ELF 64-bit LSB executable, x86-64, version 1 (SYSV)
It's from libHSshell-conduit, and other haskell packages may have the same
false positive because of it.

$ fgrep e2freefrag /usr/lib/haskell-packages -r
Binary file /usr/lib/haskell-packages/ghc/lib/x86_64-linux-ghc-8.0.2/shell-conduit-4.6.1-3HUpQGKyfpI2mFN77vEno1/Data/Conduit/Shell/PATH.dyn_hi matches
Binary file /usr/lib/haskell-packages/ghc/lib/x86_64-linux-ghc-8.0.2/shell-conduit-4.6.1-3HUpQGKyfpI2mFN77vEno1/Data/Conduit/Shell/PATH.hi matches
Binary file /usr/lib/haskell-packages/ghc/lib/x86_64-linux-ghc-8.0.2/shell-conduit-4.6.1-3HUpQGKyfpI2mFN77vEno1/Data/Conduit/Shell.dyn_hi matches
Binary file /usr/lib/haskell-packages/ghc/lib/x86_64-linux-ghc-8.0.2/shell-conduit-4.6.1-3HUpQGKyfpI2mFN77vEno1/Data/Conduit/Shell.hi matches
Binary file /usr/lib/haskell-packages/ghc/lib/x86_64-linux-ghc-8.0.2/shell-conduit-4.6.1-3HUpQGKyfpI2mFN77vEno1/libHSshell-conduit-4.6.1-3HUpQGKyfpI2mFN77vEno1.a matches
Binary file /usr/lib/haskell-packages/ghc/lib/x86_64-linux-ghc-8.0.2/libHSshell-conduit-4.6.1-3HUpQGKyfpI2mFN77vEno1-ghc8.0.2.so matches

Even better: /usr/share/doc/libghc-shell-conduit-doc/html/mini_Data-Conduit-Shell-PATH.html

It seems the package captures everything in $PATH or something like that and
generates functions (?) for all binaries it finds.

Of course this is very non-reproducible and potentially leaks interesting
things about the build system and at the same time I doubt this is useful
(though I don't understand how is it used).

-- 
WBR, wRAR
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 894 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-haskell-maintainers/attachments/20180115/18500e67/attachment.sig>


More information about the Pkg-haskell-maintainers mailing list