Bug#702290: libmp3lame0: libmp3lame.so.0 exports too many symbols (e.g. "getbits")

[Reimar Döffinger]

Package: libmp3lame0
Version: 3.99.5+repack1-3
Severity: normal
Tags: upstream patch

Dear Maintainer,
libmp3lame.so.0 currently exports lots of internal symbols.
In particular the getbits symbol causes real-world issues due to symbol
clashes, see e.g. http://users.softlab.ntua.gr/~ttsiod/mp3pro.html

To reproduce run:
nm -D /usr/lib/x86_64-linux-gnu/libmp3lame.so.0.0.0 | grep getbits

Returns:
000000000003d030 T getbits
000000000003d0a0 T getbits_fast

Expected: should not print anything, getbits is a too common name to
export safely.

mp3lame actually includes a .sym for use with libtool, but for some
reason does not use it (probably because it does not actually work
as-is).
I sent a patch upstream, but I am unsure there is much activity,
plus you might be in a better position to test if any applications
rely on these internal symbols.
Upstream bug report including (IMHO very simple) patch:
https://sourceforge.net/tracker/?func=detail&aid=3606697&group_id=290&atid=300290

-- System Information:
Debian Release: 7.0
  APT prefers unstable
  APT policy: (700, 'unstable'), (600, 'experimental'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libmp3lame0 depends on:
ii  libc6              2.17-0experimental2
ii  multiarch-support  2.17-0experimental2

libmp3lame0 recommends no packages.

libmp3lame0 suggests no packages.

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: libtool_sym.diff
Type: text/x-diff
Size: 6731 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-multimedia-maintainers/attachments/20130304/2a9626d4/attachment.diff>