Bug#715569: Official mod_vroot lib broken, lib built from source works

[Thomas Stangner]

Package: proftpd-mod-vroot
Version: 0.9.2-2+b2
Severity: grave

We are currently using the amd64 Debian Squeeze version of mod_vroot
for ProFTPD on some of our servers and wanted to upgrade to Wheezy,
however we encountered problems - the Wheezy Version of mod_vroot
did not seem to work at all, it verifiably gets loaded, but something
is broken, so the modules vroot restrictions do not apply at all.

We tried to debug the issue and ran into an oddity regarding the
current official Debian package for proftpd-mod-vroot:

If we build the package 1:1 from Debian sources via dpkg-buildpackage,
we get a slightly different/larger binary than the official binary, and
this self-built binary then works as expected.

Our steps to build the package (on a plain Wheezy amd64 box with installed/
up-to-date proftpd-dev package):

wget http://ftp.de.debian.org/debian/pool/main/p/proftpd-mod-vroot/proftpd-mod-vroot_0.9.2-2.dsc http://ftp.de.debian.org/debian/pool/main/p/proftpd-mod-vroot/proftpd-mod-vroot_0.9.2.orig.tar.gz http://ftp.de.debian.org/debian/pool/main/p/proftpd-mod-vroot/proftpd-mod-vroot_0.9.2-2.debian.tar.gz
dpkg-source -x *.dsc; cd proftpd-mod-vroot-0.9.2
dpkg-buildpackage -us -uc -rfakeroot

The resulting binary size of mod_vroot.so is 28160, current official
(0.9.2-2+b2) binary size: 28080

Is it possible that the officially shipped binary is broken or was built
with an older ProFTPD version?


-- System Information:
Debian Release: 7.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages proftpd-mod-vroot depends on:
ii  libc6                               2.13-38
ii  proftpd-basic [proftpd-abi-1.3.4a]  1.3.4a-4+nmu1

proftpd-mod-vroot recommends no packages.

proftpd-mod-vroot suggests no packages.

-- no debconf information