Debian Bug report logs - #579227
Embedded code copy: libmozjs

version graph

Package: src:jscoverage; Maintainer for src:jscoverage is Johan Euphrosine (proppy) <proppy@aminche.com>;

Reported by: Cyril Brulebois <kibi@debian.org>

Date: Mon, 26 Apr 2010 11:33:05 UTC

Severity: serious

Found in versions jscoverage/0.4-1, jscoverage/0.3.1-1

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, kibi@debian.org, Johan Euphrosine (proppy) <proppy@aminche.com>:
Bug#579227; Package src:jscoverage. (Mon, 26 Apr 2010 11:33:07 GMT) Full text and rfc822 format available.

Acknowledgement sent to Cyril Brulebois <kibi@debian.org>:
New Bug report received and forwarded. Copy sent to kibi@debian.org, Johan Euphrosine (proppy) <proppy@aminche.com>. (Mon, 26 Apr 2010 11:33:07 GMT) Full text and rfc822 format available.

Message #5 received at submit@bugs.debian.org (full text, mbox):

From: Cyril Brulebois <kibi@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Embedded code copy: libmozjs
Date: Mon, 26 Apr 2010 13:34:21 +0200
Source: jscoverage
Version: 0.4-1
Severity: serious
Tags: security
Justification: ECC

Hi (again),

it was just noticed that the FTBFS on s390 I reported sounded like an
FTBFS previously dealt with in libmozjs, meaning you're embedding it
instead of just using libmozjs-dev and dropping your embedded code copy.
Given the security records on xulrunner thingies, I'm opening this at
serious severity with security tag…

Mraw,
KiBi.




Information forwarded to debian-bugs-dist@lists.debian.org, Johan Euphrosine (proppy) <proppy@aminche.com>:
Bug#579227; Package src:jscoverage. (Thu, 29 Apr 2010 14:36:03 GMT) Full text and rfc822 format available.

Acknowledgement sent to Johan Euphrosine <proppy@aminche.com>:
Extra info received and forwarded to list. Copy sent to Johan Euphrosine (proppy) <proppy@aminche.com>. (Thu, 29 Apr 2010 14:36:04 GMT) Full text and rfc822 format available.

Message #10 received at submit@bugs.debian.org (full text, mbox):

From: Johan Euphrosine <proppy@aminche.com>
To: Cyril Brulebois <kibi@debian.org>, 579227@bugs.debian.org
Cc: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Re: Bug#579227: Embedded code copy: libmozjs
Date: Thu, 29 Apr 2010 16:33:12 +0200
[Message part 1 (text/plain, inline)]
On Mon, Apr 26, 2010 at 01:34:21PM +0200, Cyril Brulebois wrote:
> Source: jscoverage
> Version: 0.4-1
> Severity: serious
> Tags: security
> Justification: ECC
> 
> Hi (again),
> 
> it was just noticed that the FTBFS on s390 I reported sounded like an
> FTBFS previously dealt with in libmozjs, meaning you're embedding it
> instead of just using libmozjs-dev and dropping your embedded code copy.
> Given the security records on xulrunner thingies, I'm opening this at
> serious severity with security tag…
> 

Hi,

I patched their build system and their source to use latest version of
libmozjs:

diff -u jscoverage-0.5//highlight.cpp 1/jscoverage-0.5//highlight.cpp
--- jscoverage-0.5//highlight.cpp	2010-04-29 14:07:57.120047173 +0000
+++ 1/jscoverage-0.5//highlight.cpp	2010-04-24 12:00:00.000000000 +0000
@@ -225,8 +225,8 @@
   current_class = CLASS_NONE;
 
   /* tokenize the JavaScript */
-  JSTokenStream token_stream;
-  if (! js_InitTokenStream(context, &token_stream, characters, num_characters, NULL, NULL, 1)) {
+  JSTokenStream token_stream(context);
+  if (! token_stream.init(context, characters, num_characters, NULL, NULL, 1)) {
     fatal("cannot create token stream from JavaScript file %s", id);
   }
 
@@ -480,5 +480,5 @@
     output_character('\n', CLASS_NONE);
   }
 
-  js_CloseTokenStream(context, &token_stream);
+  token_stream.close(context);
 }
Only in jscoverage-0.5/: .#instrument-js.cpp
Only in jscoverage-0.5/: #instrument-js.cpp#
diff -u jscoverage-0.5//instrument-js.cpp 1/jscoverage-0.5//instrument-js.cpp
--- jscoverage-0.5//instrument-js.cpp	2010-04-29 14:14:07.890078976 +0000
+++ 1/jscoverage-0.5//instrument-js.cpp	2010-04-24 12:00:00.000000000 +0000
@@ -35,7 +35,7 @@
 #include <jsarena.h>
 #include <jsatom.h>
 #include <jsemit.h>
-// #include <jsexn.h>
+#include <jsexn.h>
 #include <jsfun.h>
 #include <jsinterp.h>
 #include <jsiter.h>
@@ -143,7 +143,7 @@
 static void print_string(JSString * s, Stream * f) {
   size_t length;
   const jschar * characters;
-  JSSTRING_CHARS_AND_LENGTH(s, characters, length);
+  s->getCharsAndLength(characters, length);
   for (size_t i = 0; i < length; i++) {
     jschar c = characters[i];
     if (32 <= c && c <= 126) {
@@ -206,7 +206,7 @@
   JSString * s = JSVAL_TO_STRING(value);
   size_t length;
   const jschar * characters;
-  JSSTRING_CHARS_AND_LENGTH(s, characters, length);
+  s->getCharsAndLength(characters, length);
   for (size_t i = 0; i < length; i++) {
     jschar c = characters[i];
     if (32 <= c && c <= 126) {
@@ -416,7 +416,7 @@
       for (JSParseNode * p = comma->pn_head; p != NULL; p = p->pn_next) {
         assert(p->pn_type == TOK_ASSIGN);
         JSParseNode * rhs = p->pn_right;
-        assert(JSSTRING_LENGTH(ATOM_TO_STRING(rhs->pn_atom)) == 0);
+        assert(ATOM_TO_STRING(rhs->pn_atom)->length() == 0);
         if (UPVAR_FRAME_SLOT(rhs->pn_cookie) == i) {
           expression = p->pn_left;
           break;
@@ -777,7 +777,7 @@
 
       size_t length;
       const jschar * characters;
-      JSSTRING_CHARS_AND_LENGTH(s, characters, length);
+      s->getCharsAndLength(characters, length);
 
       if (length == 0) {
         must_quote = true;
@@ -1433,7 +1433,7 @@
   JSErrorReporter old_error_reporter = JS_SetErrorReporter(context, error_reporter);
   JSParseNode * node = compiler.parse(global);
   if (node == NULL) {
-    //js_ReportUncaughtException(context);
+    js_ReportUncaughtException(context);
     fatal("parse error in file %s", file_id);
   }
   JS_SetErrorReporter(context, old_error_reporter);
diff -u jscoverage-0.5//Makefile.in 1/jscoverage-0.5//Makefile.in
--- jscoverage-0.5//Makefile.in	2010-04-29 14:17:11.410078501 +0000
+++ 1/jscoverage-0.5//Makefile.in	2010-04-24 12:00:00.000000000 +0000
@@ -292,8 +292,9 @@
 top_builddir = @top_builddir@
 top_srcdir = @top_srcdir@
 ACLOCAL_AMFLAGS = -I m4
-AM_CFLAGS = `pkg-config mozilla-js --cflags` @XP_DEF@
-AM_CXXFLAGS = `pkg-config mozilla-js --cflags` -funit-at-a-time @XP_DEF@
+SUBDIRS = js
+AM_CFLAGS = -Ijs -Ijs/obj @XP_DEF@
+AM_CXXFLAGS = -Ijs -Ijs/obj -funit-at-a-time @XP_DEF@
 resources = jscoverage-help.txt jscoverage-server-help.txt \
             jscoverage.jsm jscoverage.manifest jscoverage.xul jscoverage-overlay.js \
             jscoverage.html \
@@ -311,7 +312,7 @@
                      util.c util.h \
                      $(resources)
 
-jscoverage_LDADD = `pkg-config mozilla-js --libs` -lm @LIBICONV@ @EXTRA_TIMER_LIBS@
+jscoverage_LDADD = @SPIDERMONKEY_LIBS@ -lm @LIBICONV@ @EXTRA_TIMER_LIBS@
 jscoverage_server_SOURCES = http-connection.c \
                             http-exchange.c \
                             http-host.c \
@@ -327,7 +328,7 @@
                             util.c util.h \
                             $(resources)
 
-jscoverage_server_LDADD = `pkg-config mozilla-js --libs` -lm @EXTRA_SOCKET_LIBS@ @EXTRA_THREAD_LIBS@ @LIBICONV@ @EXTRA_TIMER_LIBS@
+jscoverage_server_LDADD = @SPIDERMONKEY_LIBS@ -lm @EXTRA_SOCKET_LIBS@ @EXTRA_THREAD_LIBS@ @LIBICONV@ @EXTRA_TIMER_LIBS@
 generate_resources_SOURCES = generate-resources.c
 BUILT_SOURCES = resources.c
 dist_man_MANS = jscoverage.1 jscoverage-server.1

Unfortunatly it doesn't link since most of the symbols they are using
are not part of the PUBLIC_API.

g++ `pkg-config mozilla-js --cflags` -funit-at-a-time -DXP_UNIX -g -O2   -o jscoverage encoding.o highlight.o instrument.o instrument-js.o jscoverage.o resource-manager.o stream.o util.o  `pkg-config mozilla-js --libs` -lm   
highlight.o: In function `jscoverage_highlight_js':
/usr/src/jscoverage-0.5/highlight.cpp:229: undefined reference to `js_InitTokenStream'
/usr/src/jscoverage-0.5/highlight.cpp:234: undefined reference to `js_GetToken'
/usr/src/jscoverage-0.5/highlight.cpp:334: undefined reference to `js_PeekToken'
/usr/src/jscoverage-0.5/highlight.cpp:483: undefined reference to `js_CloseTokenStream'
instrument-js.o: In function `print_string':
/usr/src/jscoverage-0.5/instrument-js.cpp:146: undefined reference to `js_GetDependentStringChars'
instrument-js.o: In function `output_expression':
/usr/src/jscoverage-0.5/instrument-js.cpp:785: undefined reference to `js_CheckKeyword'
/usr/src/jscoverage-0.5/instrument-js.cpp:788: undefined reference to `js_IsIdentifier'
/usr/src/jscoverage-0.5/instrument-js.cpp:888: undefined reference to `js_regexp_toString'
/usr/src/jscoverage-0.5/instrument-js.cpp:780: undefined reference to `js_GetDependentStringChars'
instrument-js.o: In function `print_regex':
/usr/src/jscoverage-0.5/instrument-js.cpp:209: undefined reference to `js_GetDependentStringChars'
instrument-js.o: In function `instrument_function':
/usr/src/jscoverage-0.5/instrument-js.cpp:381: undefined reference to `js_GetLocalNameArray'
instrument-js.o: In function `JSCompiler':
/usr/include/mozjs/jsparse.h:826: undefined reference to `JSCompiler::setPrincipals(JSPrincipals*)'
instrument-js.o: In function `jscoverage_instrument_js':
/usr/src/jscoverage-0.5/instrument-js.cpp:1430: undefined reference to `JSCompiler::init(unsigned short const*, unsigned int, _IO_FILE*, char const*, unsigned int)'
/usr/src/jscoverage-0.5/instrument-js.cpp:1434: undefined reference to `JSCompiler::parse(JSObject*)'
/usr/src/jscoverage-0.5/instrument-js.cpp:1610: undefined reference to `JSCompiler::~JSCompiler()'
/usr/src/jscoverage-0.5/instrument-js.cpp:1610: undefined reference to `JSCompiler::~JSCompiler()'
instrument-js.o: In function `jscoverage_parse_json':
/usr/src/jscoverage-0.5/instrument-js.cpp:1835: undefined reference to `js_InflateString'
instrument-js.o: In function `JSCompiler':
/usr/include/mozjs/jsparse.h:826: undefined reference to `JSCompiler::setPrincipals(JSPrincipals*)'
instrument-js.o: In function `jscoverage_parse_json':
/usr/src/jscoverage-0.5/instrument-js.cpp:1848: undefined reference to `JSCompiler::init(unsigned short const*, unsigned int, _IO_FILE*, char const*, unsigned int)'
/usr/src/jscoverage-0.5/instrument-js.cpp:1852: undefined reference to `JSCompiler::parse(JSObject*)'
/usr/src/jscoverage-0.5/instrument-js.cpp:2041: undefined reference to `JSCompiler::~JSCompiler()'
/usr/src/jscoverage-0.5/instrument-js.cpp:2041: undefined reference to `JSCompiler::~JSCompiler()'
collect2: ld returned 1 exit status
make[2]: *** [jscoverage] Error 1
make[2]: Leaving directory `/usr/src/jscoverage-0.5'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/src/jscoverage-0.5'
make: *** [all] Error 2

How could I fix this issue ?
-- 
Johan Euphrosine (proppy) <proppy@aminche.com>
Development and services around Free Software
http://www.aminche.com/
[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, Johan Euphrosine (proppy) <proppy@aminche.com>:
Bug#579227; Package src:jscoverage. (Thu, 29 Apr 2010 14:36:08 GMT) Full text and rfc822 format available.

Acknowledgement sent to Johan Euphrosine <proppy@aminche.com>:
Extra info received and forwarded to list. Copy sent to Johan Euphrosine (proppy) <proppy@aminche.com>. (Thu, 29 Apr 2010 14:36:08 GMT) Full text and rfc822 format available.

Information forwarded to debian-bugs-dist@lists.debian.org, Johan Euphrosine (proppy) <proppy@aminche.com>:
Bug#579227; Package src:jscoverage. (Thu, 29 Apr 2010 15:45:03 GMT) Full text and rfc822 format available.

Acknowledgement sent to Johan Euphrosine <proppy@aminche.com>:
Extra info received and forwarded to list. Copy sent to Johan Euphrosine (proppy) <proppy@aminche.com>. (Thu, 29 Apr 2010 15:45:03 GMT) Full text and rfc822 format available.

Message #20 received at submit@bugs.debian.org (full text, mbox):

From: Johan Euphrosine <proppy@aminche.com>
To: Cyril Brulebois <kibi@debian.org>, 579227@bugs.debian.org
Cc: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Re: Bug#579227: Embedded code copy: libmozjs
Date: Thu, 29 Apr 2010 17:40:22 +0200
[Message part 1 (text/plain, inline)]
On Mon, Apr 26, 2010 at 01:34:21PM +0200, Cyril Brulebois wrote:
> Source: jscoverage
> Version: 0.4-1
> Severity: serious
> Tags: security
> Justification: ECC
> 
> Hi (again),
> 
> it was just noticed that the FTBFS on s390 I reported sounded like an
> FTBFS previously dealt with in libmozjs, meaning you're embedding it
> instead of just using libmozjs-dev and dropping your embedded code copy.
> Given the security records on xulrunner thingies, I'm opening this at
> serious severity with security tag…
> 

It seems fedora spotted the same issue when reviewing jscoverage
package:

https://bugzilla.redhat.com/show_bug.cgi?id=453264

One of the comment states the following:
"""
The Mozilla SpiderMonkey js library is intended to be used as a 
JavaScript interpreter, but JSCoverage uses it for parsing, rather than 
interpreting, JavaScript.  Unfortunately the parsing functions are not 
"public" and could possibly change any time the library is upgraded.


I think the above qualifies as a good reason to allow static linking.
"""

I was wondering it debian would allow static linking in that case ?
-- 
Johan Euphrosine (proppy) <proppy@aminche.com>
Development and services around Free Software
http://www.aminche.com/
[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, Johan Euphrosine (proppy) <proppy@aminche.com>:
Bug#579227; Package src:jscoverage. (Thu, 29 Apr 2010 15:45:14 GMT) Full text and rfc822 format available.

Acknowledgement sent to Johan Euphrosine <proppy@aminche.com>:
Extra info received and forwarded to list. Copy sent to Johan Euphrosine (proppy) <proppy@aminche.com>. (Thu, 29 Apr 2010 15:45:14 GMT) Full text and rfc822 format available.

Information forwarded to debian-bugs-dist@lists.debian.org, Johan Euphrosine (proppy) <proppy@aminche.com>:
Bug#579227; Package src:jscoverage. (Fri, 30 Apr 2010 11:00:06 GMT) Full text and rfc822 format available.

Acknowledgement sent to Johan Euphrosine <proppy@aminche.com>:
Extra info received and forwarded to list. Copy sent to Johan Euphrosine (proppy) <proppy@aminche.com>. (Fri, 30 Apr 2010 11:00:06 GMT) Full text and rfc822 format available.

Message #30 received at submit@bugs.debian.org (full text, mbox):

From: Johan Euphrosine <proppy@aminche.com>
To: Cyril Brulebois <kibi@debian.org>, 579227@bugs.debian.org
Cc: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Re: Bug#579227: Embedded code copy: libmozjs
Date: Fri, 30 Apr 2010 12:57:34 +0200
[Message part 1 (text/plain, inline)]
On Mon, Apr 26, 2010 at 01:34:21PM +0200, Cyril Brulebois wrote:
> it was just noticed that the FTBFS on s390 I reported sounded like an
> FTBFS previously dealt with in libmozjs, meaning you're embedding it
> instead of just using libmozjs-dev and dropping your embedded code copy.
> Given the security records on xulrunner thingies, I'm opening this at
> serious severity with security tag…

Upstream is aware of this problem and is waiting for SpiderMonkey
developer to provide a public API for the parser before removing the
need for the embedded copy of SpiderMonkey.

See the following blog comment by jscoverage author:
http://blog.mozilla.com/dherman/2010/04/22/language-engineering-on-the-web/comment-page-1/#comment-3

There seems to be outgoing work for this in SpiderMonkey:
https://bugzilla.mozilla.org/show_bug.cgi?id=533874

I posted to mozilla.dev.tech.js-engine (as advised by irc.mozilla.org
#jsapi folks), to ask for the current status of this work.
-- 
Johan Euphrosine (proppy) <proppy@aminche.com>
Development and services around Free Software
http://www.aminche.com/
[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, Johan Euphrosine (proppy) <proppy@aminche.com>:
Bug#579227; Package src:jscoverage. (Fri, 30 Apr 2010 11:00:10 GMT) Full text and rfc822 format available.

Acknowledgement sent to Johan Euphrosine <proppy@aminche.com>:
Extra info received and forwarded to list. Copy sent to Johan Euphrosine (proppy) <proppy@aminche.com>. (Fri, 30 Apr 2010 11:00:10 GMT) Full text and rfc822 format available.

Information forwarded to debian-bugs-dist@lists.debian.org, Johan Euphrosine (proppy) <proppy@aminche.com>:
Bug#579227; Package src:jscoverage. (Fri, 27 Aug 2010 22:27:06 GMT) Full text and rfc822 format available.

Acknowledgement sent to Johan Euphrosine <proppy@aminche.com>:
Extra info received and forwarded to list. Copy sent to Johan Euphrosine (proppy) <proppy@aminche.com>. (Fri, 27 Aug 2010 22:27:06 GMT) Full text and rfc822 format available.

Message #40 received at 579227@bugs.debian.org (full text, mbox):

From: Johan Euphrosine <proppy@aminche.com>
To: 579227@bugs.debian.org
Subject: SpiderMonkey parsing API
Date: Sat, 28 Aug 2010 00:22:57 +0200
[Message part 1 (text/plain, inline)]
Mozilla folks announced that a parser API for JavaScript has landed in
SpiderMonkey:
http://blog.mozilla.com/dherman/2010/08/25/an-api-for-parsing-javascript/

Pinging upstream about it.
-- 
Johan Euphrosine (proppy) <proppy@aminche.com>
Development and services around Free Software
http://www.aminche.com/
[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, Johan Euphrosine (proppy) <proppy@aminche.com>:
Bug#579227; Package src:jscoverage. (Sat, 13 Nov 2010 19:42:02 GMT) Full text and rfc822 format available.

Acknowledgement sent to Enrico Zini <enrico@enricozini.org>:
Extra info received and forwarded to list. Copy sent to Johan Euphrosine (proppy) <proppy@aminche.com>. (Sat, 13 Nov 2010 19:42:02 GMT) Full text and rfc822 format available.

Message #45 received at 579227@bugs.debian.org (full text, mbox):

From: Enrico Zini <enrico@enricozini.org>
To: 579227@bugs.debian.org
Subject: Looks like we should drop jscoverage for squeeze
Date: Sat, 13 Nov 2010 19:39:12 +0000
[Message part 1 (text/plain, inline)]
Hello,

thank you for maintaining jscoverage.

jscoverage 0.3.1-1 is currently in squeeze and sid and has RC bugs open
against it.

Considering that the package has a very small number of users, that
we're supposed to release fairly soon, and that this issue looks not
that easy to solve, it may be a good idea to just remove
jscoverage from testing and deal with this comfortably in unstable.

Would it make sense for you?


Ciao,

Enrico

-- 
GPG key: 4096R/E7AD5568 2009-05-08 Enrico Zini <enrico@enricozini.org>
[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, Johan Euphrosine (proppy) <proppy@aminche.com>:
Bug#579227; Package src:jscoverage. (Sat, 13 Nov 2010 19:54:03 GMT) Full text and rfc822 format available.

Acknowledgement sent to Johan Euphrosine <proppy@aminche.com>:
Extra info received and forwarded to list. Copy sent to Johan Euphrosine (proppy) <proppy@aminche.com>. (Sat, 13 Nov 2010 19:54:03 GMT) Full text and rfc822 format available.

Message #50 received at 579227@bugs.debian.org (full text, mbox):

From: Johan Euphrosine <proppy@aminche.com>
To: Enrico Zini <enrico@enricozini.org>, 579227@bugs.debian.org
Subject: Re: Bug#579227: Looks like we should drop jscoverage for squeeze
Date: Sat, 13 Nov 2010 20:51:40 +0100
On Sat, Nov 13, 2010 at 8:39 PM, Enrico Zini <enrico@enricozini.org> wrote:
> Hello,
>
> thank you for maintaining jscoverage.
>
> jscoverage 0.3.1-1 is currently in squeeze and sid and has RC bugs open
> against it.
>
> Considering that the package has a very small number of users, that
> we're supposed to release fairly soon, and that this issue looks not
> that easy to solve, it may be a good idea to just remove
> jscoverage from testing and deal with this comfortably in unstable.
>
> Would it make sense for you?

Sure,

The only RC bugs known to me is #579227,

Last time I pinged upstream about it, he said that it would require a
rewrite of some key part of jscoverage in order to use the new parser
API in spidermonkey and remove the embedded copy.

I think it is a good idea to remove jscoverage from testing if it
blocks squeeze release, and I will keep updating the unstable package
when upstream publish a new major version.

Thanks.




Information forwarded to debian-bugs-dist@lists.debian.org, Johan Euphrosine (proppy) <proppy@aminche.com>:
Bug#579227; Package src:jscoverage. (Sat, 01 Sep 2012 23:39:02 GMT) Full text and rfc822 format available.

Acknowledgement sent to David Prévot <taffit@debian.org>:
Extra info received and forwarded to list. Copy sent to Johan Euphrosine (proppy) <proppy@aminche.com>. (Sat, 01 Sep 2012 23:39:02 GMT) Full text and rfc822 format available.

Message #55 received at 579227@bugs.debian.org (full text, mbox):

From: David Prévot <taffit@debian.org>
To: Johan Euphrosine <proppy@aminche.com>, 579227@bugs.debian.org, debian-release@lists.debian.org
Subject: Re: Bug#579227: Looks like we should drop jscoverage for squeeze
Date: Sat, 1 Sep 2012 19:35:34 -0400
[Message part 1 (text/plain, inline)]
Control: found -1 0.3.1-1

Hi,

On Sat, Nov 13, 2010 at 08:51:40PM +0100, Johan Euphrosine wrote:
> On Sat, Nov 13, 2010 at 8:39 PM, Enrico Zini <enrico@enricozini.org> wrote:
> > Hello,
> >
> > thank you for maintaining jscoverage.
> >
> > jscoverage 0.3.1-1 is currently in squeeze and sid and has RC bugs open
> > against it.
> >
> > Considering that the package has a very small number of users, that
> > we're supposed to release fairly soon, and that this issue looks not
> > that easy to solve, it may be a good idea to just remove
> > jscoverage from testing and deal with this comfortably in unstable.
> >
> > Would it make sense for you?
> 
> Sure,
> 
> The only RC bugs known to me is #579227,
> 
> Last time I pinged upstream about it, he said that it would require a
> rewrite of some key part of jscoverage in order to use the new parser
> API in spidermonkey and remove the embedded copy.
> 
> I think it is a good idea to remove jscoverage from testing if it
> blocks squeeze release, and I will keep updating the unstable package
> when upstream publish a new major version.

It seems jscoverage 0.3.1-1 currently in testing (and Squeeze) also
shipped an embedded code copy of libmozjs, so it may be sensible to
actually remove it from testing as suggested two years ago, and maybe
from Squeeze too.

Regards

David


[signature.asc (application/pgp-signature, inline)]

Marked as found in versions jscoverage/0.3.1-1. Request was from David Prévot <taffit@debian.org> to 579227-submit@bugs.debian.org. (Sat, 01 Sep 2012 23:39:03 GMT) Full text and rfc822 format available.

Information forwarded to debian-bugs-dist@lists.debian.org, Johan Euphrosine (proppy) <proppy@aminche.com>:
Bug#579227; Package src:jscoverage. (Sun, 02 Sep 2012 07:51:03 GMT) Full text and rfc822 format available.

Acknowledgement sent to Johan Euphrosine <johan@euphrosine.fr>:
Extra info received and forwarded to list. Copy sent to Johan Euphrosine (proppy) <proppy@aminche.com>. (Sun, 02 Sep 2012 07:51:03 GMT) Full text and rfc822 format available.

Message #62 received at 579227@bugs.debian.org (full text, mbox):

From: Johan Euphrosine <johan@euphrosine.fr>
To: 579227@bugs.debian.org, David Prévot <taffit@debian.org>
Cc: debian-release@lists.debian.org
Subject: Re: Bug#579227: Looks like we should drop jscoverage for squeeze
Date: Sun, 2 Sep 2012 09:48:11 +0200
[Message part 1 (text/plain, inline)]
Sure, it doesn't seem upstream is actively developing it anymore.
On Sep 2, 2012 1:39 AM, "David Prévot" <taffit@debian.org> wrote:

> Control: found -1 0.3.1-1
>
> Hi,
>
> On Sat, Nov 13, 2010 at 08:51:40PM +0100, Johan Euphrosine wrote:
> > On Sat, Nov 13, 2010 at 8:39 PM, Enrico Zini <enrico@enricozini.org>
> wrote:
> > > Hello,
> > >
> > > thank you for maintaining jscoverage.
> > >
> > > jscoverage 0.3.1-1 is currently in squeeze and sid and has RC bugs open
> > > against it.
> > >
> > > Considering that the package has a very small number of users, that
> > > we're supposed to release fairly soon, and that this issue looks not
> > > that easy to solve, it may be a good idea to just remove
> > > jscoverage from testing and deal with this comfortably in unstable.
> > >
> > > Would it make sense for you?
> >
> > Sure,
> >
> > The only RC bugs known to me is #579227,
> >
> > Last time I pinged upstream about it, he said that it would require a
> > rewrite of some key part of jscoverage in order to use the new parser
> > API in spidermonkey and remove the embedded copy.
> >
> > I think it is a good idea to remove jscoverage from testing if it
> > blocks squeeze release, and I will keep updating the unstable package
> > when upstream publish a new major version.
>
> It seems jscoverage 0.3.1-1 currently in testing (and Squeeze) also
> shipped an embedded code copy of libmozjs, so it may be sensible to
> actually remove it from testing as suggested two years ago, and maybe
> from Squeeze too.
>
> Regards
>
> David
>
>
>
[Message part 2 (text/html, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, Johan Euphrosine (proppy) <proppy@aminche.com>:
Bug#579227; Package src:jscoverage. (Sun, 02 Sep 2012 13:09:07 GMT) Full text and rfc822 format available.

Acknowledgement sent to Johan Euphrosine <johan@euphrosine.fr>:
Extra info received and forwarded to list. Copy sent to Johan Euphrosine (proppy) <proppy@aminche.com>. (Sun, 02 Sep 2012 13:09:07 GMT) Full text and rfc822 format available.

Message #67 received at 579227@bugs.debian.org (full text, mbox):

From: Johan Euphrosine <johan@euphrosine.fr>
To: 579227@bugs.debian.org, David Prévot <taffit@debian.org>
Cc: debian-release@lists.debian.org
Subject: Re: Bug#579227: Looks like we should drop jscoverage for squeeze
Date: Sun, 2 Sep 2012 15:08:43 +0200
[Message part 1 (text/plain, inline)]
I'm not aware of any alternative for javascript coverage packaged in
debian. So if possible I would like to keep it in unstable.
[Message part 2 (text/html, inline)]

Removed tag(s) security. Request was from Moritz Muehlenhoff <jmm@inutil.org> to control@bugs.debian.org. (Wed, 29 Jan 2014 07:36:12 GMT) Full text and rfc822 format available.

Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Fri Apr 25 06:38:32 2014; Machine Name: buxtehude.debian.org

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.