Debian Bug report logs - #714906
scan-build: does not respect the TMP/TMPDIR/TEMP/TEMPDIR evironment variables

Display info messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Paul Wise <pabs@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: scan-build: does not respect the TMP/TMPDIR/TEMP/TEMPDIR evironment variables

Date: Thu, 04 Jul 2013 15:42:14 +0800

[Message part 1 (text/plain, inline)]

Package: clang-3.2
Version: 1:3.2repack-10
Severity: normal
File: /usr/bin/scan-build
Usertags: tmp

I have TMP/TMPDIR/TEMP/TEMPDIR set using libpam-tmpdir to a per-user
directory but scan-build just writes to /tmp. Please switch to
File::Tempdir which respects these environment variables. I also wonder
if this is a security issue on multiuser systems.

scan-build: Removing directory '/tmp/scan-build-2013-07-04-2' because it contains no reports.

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (700, 'testing'), (600, 'unstable'), (550, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.10-rc7-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages clang-3.2 depends on:
ii  libc6                2.17-6
ii  libclang-common-dev  1:3.2repack-10
ii  libffi6              3.0.13-4
ii  libgcc-4.8-dev       4.8.1-2
ii  libgcc1              1:4.8.1-2
ii  libllvm3.2           1:3.2repack-10
ii  libobjc-4.8-dev      4.8.1-2
ii  libstdc++-4.8-dev    4.8.1-2
ii  libstdc++6           4.8.1-2

Versions of packages clang-3.2 recommends:
pn  llvm-3.2-dev  <none>
ii  python        2.7.5-2



-- 
bye,
pabs

http://wiki.debian.org/PaulWise

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 714906@bugs.debian.org (full text, mbox, reply):

From: Paul Wise <pabs3@bonedaddy.net>

To: 714906@bugs.debian.org

Subject: Re: scan-build: does not respect the TMP/TMPDIR/TEMP/TEMPDIR evironment variables

Date: Thu, 04 Jul 2013 15:53:05 +0800

On Thu, 2013-07-04 at 15:42 +0800, Paul Wise wrote:

> Please switch to File::Tempdir which respects these environment variables.

Er, I mean tempdir from File::Temp.

-- 
bye,
pabs

http://bonedaddy.net/pabs3/

Message #15 received at 714906@bugs.debian.org (full text, mbox, reply):

From: Léo Cavaillé <leo+debian@cavaille.net>

To: Paul Wise <pabs3@bonedaddy.net>, 714906@bugs.debian.org

Subject: Re: Bug#714906: scan-build: does not respect the TMP/TMPDIR/TEMP/TEMPDIR evironment variables

Date: Sat, 20 Jul 2013 23:59:39 +0200

Hello,

Just happening to work on scan-build those days.
The issue you're reporting is failing because of this very version of
scan-build : the TMPDIR POSIX standard env variable is only taken into
account if (`uname` =~ /Darwin/).

In a newer version of llvm-toolchain (3.3 or snapshot), this condition
has been removed, therefore using libpam-tmpdir with scan-build works
without any problem.

The code does not use File::Temp but create paths manually instead,
checking for -o option or/and TMPDIR directory.

I reckon that Sylvestre does not maintain the 3.2 branch anymore, but I
can be wrong. A two line patch will solve this problem anyhow.

Bonus : there is still mention of this Darwin thing in the scan-build
manpage (HEAD version) <quote>If this option is not specified, a
directory is created in /tmp (TMPDIR on Mac OS X) to store the
reports.</quote>
This could be the object of a fixme upstream.

Thanks for the report,
Cheers

-- 
Léo

Message #22 received at 714906-done@bugs.debian.org (full text, mbox, reply):

From: Sylvestre Ledru <sylvestre@debian.org>

To: control@bugs.debian.org, 714906-done@bugs.debian.org

Subject: fixed in the new upstream release

Date: Tue, 13 Aug 2013 10:33:23 +0200

fixed 714906 1:3.3-1
thanks

Send a report that this bug log contains spam.