Debian Bug report logs - #580173
xulrunner-1.9.2: libmozjs3d dependency not tight enough

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Will Dyson <will_dyson@pobox.com>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: xulrunner-1.9.2: libmozjs3d dependency not tight enough

Date: Mon, 03 May 2010 22:34:23 -0400

Package: xulrunner-1.9.2
Version: 1.9.2.4~build2-1
Severity: normal
Tags: experimental

xulrunner-1.9.2.4~build2-1 declares a dependency against libmozjs3d >=
1.9.2.2. However, it crashes with 1.9.2.3-2 installed. 1.9.2.4~build2-1
is required not to crash.

Perhaps this is not a big deal, since only upgraders from previous
experimental versions will be affected. But in general, I believe
xulrunner should require an exact version match with libmozjs.

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.34-rc5-00148-g7a1ffce (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages xulrunner-1.9.2 depends on:
ii  libasound2              1.0.22-2         shared library for ALSA applicatio
ii  libatk1.0-0             1.30.0-1         The ATK accessibility toolkit
ii  libbz2-1.0              1.0.5-4          high-quality block-sorting file co
ii  libc6                   2.10.2-7         Embedded GNU C Library: Shared lib
ii  libcairo2               1.8.10-4         The Cairo 2D vector graphics libra
ii  libdbus-1-3             1.2.24-1         simple interprocess messaging syst
ii  libevent-1.4-2          1.4.13-stable-1  An asynchronous event notification
ii  libffi5                 3.0.9-2          Foreign Function Interface library
ii  libfontconfig1          2.8.0-2.1        generic font configuration library
ii  libfreetype6            2.3.11-1         FreeType 2 font engine, shared lib
ii  libgcc1                 1:4.4.4-1        GCC support library
ii  libglib2.0-0            2.24.1-1         The GLib library of C routines
ii  libgtk2.0-0             2.20.1-1         The GTK+ graphical user interface 
ii  libhunspell-1.2-0       1.2.8-6          spell checker and morphological an
ii  libjpeg62               6b-16.1          The Independent JPEG Group's JPEG 
ii  libmozjs3d              1.9.2.4~build2-1 The Mozilla SpiderMonkey JavaScrip
ii  libnspr4-0d             4.8.4-1          NetScape Portable Runtime Library
ii  libnss3-1d              3.12.6-2         Network Security Service libraries
ii  libpango1.0-0           1.28.0-1         Layout and rendering of internatio
ii  libpixman-1-0           0.16.4-1         pixel-manipulation library for X a
ii  libpng12-0              1.2.43-1         PNG library - runtime
ii  libreadline6            6.1-2            GNU readline and history libraries
ii  libsqlite3-0            3.6.23.1-1       SQLite 3 shared library
ii  libstartup-notification 0.10-1           library for program launch feedbac
ii  libstdc++6              4.4.4-1          The GNU Standard C++ Library v3
ii  libx11-6                2:1.3.3-3        X11 client-side library
ii  libxrender1             1:0.9.5-2        X Rendering Extension client libra
ii  libxt6                  1:1.0.7-1        X11 toolkit intrinsics library
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

xulrunner-1.9.2 recommends no packages.

Versions of packages xulrunner-1.9.2 suggests:
ii  libcanberra0                  0.22-1     a simple abstract interface for pl
ii  libdbus-glib-1-2              0.86-1     simple interprocess messaging syst
ii  libgconf2-4                   2.28.1-3   GNOME configuration database syste
ii  libgnomeui-0                  2.24.3-1   The GNOME libraries (User Interfac
ii  libgnomevfs2-0                1:2.24.3-1 GNOME Virtual File System (runtime
ii  libnotify1 [libnotify1-gtk2.1 0.4.5-1    sends desktop notifications to a n

-- no debconf information

Message #10 received at 580173@bugs.debian.org (full text, mbox, reply):

From: Mike Hommey <mh@glandium.org>

To: Will Dyson <will_dyson@pobox.com>, 580173@bugs.debian.org

Subject: Re: Bug#580173: xulrunner-1.9.2: libmozjs3d dependency not tight enough

Date: Tue, 4 May 2010 08:12:54 +0200

On Mon, May 03, 2010 at 10:34:23PM -0400, Will Dyson wrote:
> Package: xulrunner-1.9.2
> Version: 1.9.2.4~build2-1
> Severity: normal
> Tags: experimental
> 
> xulrunner-1.9.2.4~build2-1 declares a dependency against libmozjs3d >=
> 1.9.2.2. However, it crashes with 1.9.2.3-2 installed. 1.9.2.4~build2-1
> is required not to crash.
> 
> Perhaps this is not a big deal, since only upgraders from previous
> experimental versions will be affected. But in general, I believe
> xulrunner should require an exact version match with libmozjs.

There is a double problem here. I agree xulrunner should depend on the
exact version of libmozjs at least, but an older libmozjs shouldn't
break a newer xulrunner with no ABI change, because that means there
could also be trouble for others packages using libmozjs, so the root
cause still needs to be known accurately.

Cheers

Mike

Message #15 received at 580173@bugs.debian.org (full text, mbox, reply):

From: Mike Hommey <mh@glandium.org>

To: Will Dyson <will_dyson@pobox.com>, 580173@bugs.debian.org

Subject: Re: Bug#580173: xulrunner-1.9.2: libmozjs3d dependency not tight enough

Date: Tue, 4 May 2010 09:50:15 +0200

On Tue, May 04, 2010 at 08:12:54AM +0200, Mike Hommey wrote:
> On Mon, May 03, 2010 at 10:34:23PM -0400, Will Dyson wrote:
> > Package: xulrunner-1.9.2
> > Version: 1.9.2.4~build2-1
> > Severity: normal
> > Tags: experimental
> > 
> > xulrunner-1.9.2.4~build2-1 declares a dependency against libmozjs3d >=
> > 1.9.2.2. However, it crashes with 1.9.2.3-2 installed. 1.9.2.4~build2-1
> > is required not to crash.
> > 
> > Perhaps this is not a big deal, since only upgraders from previous
> > experimental versions will be affected. But in general, I believe
> > xulrunner should require an exact version match with libmozjs.
> 
> There is a double problem here. I agree xulrunner should depend on the
> exact version of libmozjs at least, but an older libmozjs shouldn't
> break a newer xulrunner with no ABI change, because that means there
> could also be trouble for others packages using libmozjs, so the root
> cause still needs to be known accurately.

The cause is js_LeaveTrace and js_CanLeaveTrace, which are static
functions defined in jscntxt.h, and that read data from a struct
which structure (slightly) changed in 1.9.2.4. Since they are static
functions defined in a header, they end up in the binary linking against
libmozjs instead of libmozjs, therefore the compatibility problem.

Fortunately, no other software in debian use these functions (the same
change is going to affect 1.9.1.10 when it is released), so we are
somehow safe.

This unfortunately also means that a newer libmozjs3d will break an
older xulrunner-1.9.2.

Mike

Message #20 received at 580173-done@bugs.debian.org (full text, mbox, reply):

From: Mike Hommey <mh@glandium.org>

To: 580173-done@bugs.debian.org

Subject: Re: Bug#580173: xulrunner-1.9.2: libmozjs3d dependency not tight enough

Date: Wed, 23 Jun 2010 12:01:08 +0200

Version: 1.9.2.4~build2-2

This was fixed in that version

On Mon, May 03, 2010 at 10:34:23PM -0400, Will Dyson wrote:
> Package: xulrunner-1.9.2
> Version: 1.9.2.4~build2-1
> Severity: normal
> Tags: experimental
> 
> xulrunner-1.9.2.4~build2-1 declares a dependency against libmozjs3d >=
> 1.9.2.2. However, it crashes with 1.9.2.3-2 installed. 1.9.2.4~build2-1
> is required not to crash.
> 
> Perhaps this is not a big deal, since only upgraders from previous
> experimental versions will be affected. But in general, I believe
> xulrunner should require an exact version match with libmozjs.
> 
> -- System Information:
> Debian Release: squeeze/sid
>   APT prefers unstable
>   APT policy: (500, 'unstable'), (1, 'experimental')
> Architecture: amd64 (x86_64)
> 
> Kernel: Linux 2.6.34-rc5-00148-g7a1ffce (SMP w/2 CPU cores; PREEMPT)
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8)
> Shell: /bin/sh linked to /bin/bash
> 
> Versions of packages xulrunner-1.9.2 depends on:
> ii  libasound2              1.0.22-2         shared library for ALSA applicatio
> ii  libatk1.0-0             1.30.0-1         The ATK accessibility toolkit
> ii  libbz2-1.0              1.0.5-4          high-quality block-sorting file co
> ii  libc6                   2.10.2-7         Embedded GNU C Library: Shared lib
> ii  libcairo2               1.8.10-4         The Cairo 2D vector graphics libra
> ii  libdbus-1-3             1.2.24-1         simple interprocess messaging syst
> ii  libevent-1.4-2          1.4.13-stable-1  An asynchronous event notification
> ii  libffi5                 3.0.9-2          Foreign Function Interface library
> ii  libfontconfig1          2.8.0-2.1        generic font configuration library
> ii  libfreetype6            2.3.11-1         FreeType 2 font engine, shared lib
> ii  libgcc1                 1:4.4.4-1        GCC support library
> ii  libglib2.0-0            2.24.1-1         The GLib library of C routines
> ii  libgtk2.0-0             2.20.1-1         The GTK+ graphical user interface 
> ii  libhunspell-1.2-0       1.2.8-6          spell checker and morphological an
> ii  libjpeg62               6b-16.1          The Independent JPEG Group's JPEG 
> ii  libmozjs3d              1.9.2.4~build2-1 The Mozilla SpiderMonkey JavaScrip
> ii  libnspr4-0d             4.8.4-1          NetScape Portable Runtime Library
> ii  libnss3-1d              3.12.6-2         Network Security Service libraries
> ii  libpango1.0-0           1.28.0-1         Layout and rendering of internatio
> ii  libpixman-1-0           0.16.4-1         pixel-manipulation library for X a
> ii  libpng12-0              1.2.43-1         PNG library - runtime
> ii  libreadline6            6.1-2            GNU readline and history libraries
> ii  libsqlite3-0            3.6.23.1-1       SQLite 3 shared library
> ii  libstartup-notification 0.10-1           library for program launch feedbac
> ii  libstdc++6              4.4.4-1          The GNU Standard C++ Library v3
> ii  libx11-6                2:1.3.3-3        X11 client-side library
> ii  libxrender1             1:0.9.5-2        X Rendering Extension client libra
> ii  libxt6                  1:1.0.7-1        X11 toolkit intrinsics library
> ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime
> 
> xulrunner-1.9.2 recommends no packages.
> 
> Versions of packages xulrunner-1.9.2 suggests:
> ii  libcanberra0                  0.22-1     a simple abstract interface for pl
> ii  libdbus-glib-1-2              0.86-1     simple interprocess messaging syst
> ii  libgconf2-4                   2.28.1-3   GNOME configuration database syste
> ii  libgnomeui-0                  2.24.3-1   The GNOME libraries (User Interfac
> ii  libgnomevfs2-0                1:2.24.3-1 GNOME Virtual File System (runtime
> ii  libnotify1 [libnotify1-gtk2.1 0.4.5-1    sends desktop notifications to a n
> 
> -- no debconf information
> 
> 
> 

Message #25 received at 580173-close@bugs.debian.org (full text, mbox, reply):

From: Mike Hommey <glandium@debian.org>

To: 580173-close@bugs.debian.org

Subject: Bug#580173: fixed in xulrunner 1.9.1.10-1

Date: Wed, 23 Jun 2010 11:20:08 +0000

Source: xulrunner
Source-Version: 1.9.1.10-1

We believe that the bug you reported is fixed in the latest version of
xulrunner, which is due to be installed in the Debian FTP archive:

libmozillainterfaces-java_1.9.1.10-1_all.deb
  to main/x/xulrunner/libmozillainterfaces-java_1.9.1.10-1_all.deb
libmozjs-dev_1.9.1.10-1_amd64.deb
  to main/x/xulrunner/libmozjs-dev_1.9.1.10-1_amd64.deb
libmozjs2d-dbg_1.9.1.10-1_amd64.deb
  to main/x/xulrunner/libmozjs2d-dbg_1.9.1.10-1_amd64.deb
libmozjs2d_1.9.1.10-1_amd64.deb
  to main/x/xulrunner/libmozjs2d_1.9.1.10-1_amd64.deb
python-xpcom_1.9.1.10-1_amd64.deb
  to main/x/xulrunner/python-xpcom_1.9.1.10-1_amd64.deb
spidermonkey-bin_1.9.1.10-1_amd64.deb
  to main/x/xulrunner/spidermonkey-bin_1.9.1.10-1_amd64.deb
xulrunner-1.9.1-dbg_1.9.1.10-1_amd64.deb
  to main/x/xulrunner/xulrunner-1.9.1-dbg_1.9.1.10-1_amd64.deb
xulrunner-1.9.1_1.9.1.10-1_amd64.deb
  to main/x/xulrunner/xulrunner-1.9.1_1.9.1.10-1_amd64.deb
xulrunner-dev_1.9.1.10-1_amd64.deb
  to main/x/xulrunner/xulrunner-dev_1.9.1.10-1_amd64.deb
xulrunner_1.9.1.10-1.debian.tar.gz
  to main/x/xulrunner/xulrunner_1.9.1.10-1.debian.tar.gz
xulrunner_1.9.1.10-1.dsc
  to main/x/xulrunner/xulrunner_1.9.1.10-1.dsc
xulrunner_1.9.1.10.orig.tar.bz2
  to main/x/xulrunner/xulrunner_1.9.1.10.orig.tar.bz2



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 580173@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Mike Hommey <glandium@debian.org> (supplier of updated xulrunner package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Wed, 23 Jun 2010 11:48:22 +0200
Source: xulrunner
Binary: xulrunner-1.9.1 libmozjs2d libmozjs-dev libmozjs2d-dbg spidermonkey-bin xulrunner-dev xulrunner-1.9.1-dbg libmozillainterfaces-java python-xpcom
Architecture: source amd64 all
Version: 1.9.1.10-1
Distribution: unstable
Urgency: high
Maintainer: Maintainers of Mozilla-related packages <pkg-mozilla-maintainers@lists.alioth.debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description: 
 libmozillainterfaces-java - XPCOM bindings for Java
 libmozjs-dev - Development files for the Mozilla SpiderMonkey JavaScript library
 libmozjs2d - The Mozilla SpiderMonkey JavaScript library
 libmozjs2d-dbg - Development files for the Mozilla SpiderMonkey JavaScript library
 python-xpcom - XPCOM bindings for Python
 spidermonkey-bin - standalone JavaScript/ECMAScript (ECMA-262) interpreter
 xulrunner-1.9.1 - XUL + XPCOM application runner
 xulrunner-1.9.1-dbg - Debugging symbols for the Gecko engine library
 xulrunner-dev - Development files for the Gecko engine library
Closes: 532516 553635 580104 580173
Changes: 
 xulrunner (1.9.1.10-1) unstable; urgency=high
 .
   * New upstream release.
   * Fixes mfsa-2010-{26-33}, also known as
     CVE-2010-1200, CVE-2010-1201, CVE-2010-1202, CVE-2010-0183,
     CVE-2010-1198, CVE-2010-1196, CVE-2010-1199, CVE-2010-1125,
     CVE-2010-1197, CVE-2008-5913.
     Closes: #532516
 .
   * debian/rules: Strip symbols in the spidermonkey-bin package.
   * debian/control.*:
     - xulrunner-1.9.x needs to depend on a strict version of libmozjs.
       Closes: #580173.
     - libmozjs2d breaks older xulrunner-1.9.1. Closes: #580104.
 .
   * modules/libpr0n/encoders/png/nsPNGEncoder.cpp: Use png_set_filter to make
     libpng not use write filters. bz#564410.
   * netwerk/protocol/http/src/nsHttpChannel.cpp: Make sure to call
     OnStartRequest even if we're failing on an SSL CONNECT. bz#561536.
     Closes: #553635.
   * memory/jemalloc/jemalloc.c: Use syscall() for mmap and munmap, and disable
     ncpus use in jemalloc to work around deadlocks. Replaces the previous patch
     to use a small pool of static memory during initialization. bz#435683
 .
   * debian/test.mk: Re-enable PNG xpcshell tests that were failing when using
     system library.
Checksums-Sha1: 
 900f2470b778ebc9b744cf4f940a7614a7e9096c 2080 xulrunner_1.9.1.10-1.dsc
 4543a11f566b2fa8e06613cadd00837f1ba33a93 41164807 xulrunner_1.9.1.10.orig.tar.bz2
 19f4be51bb599923963b70e241e72d6c1f64962c 221332 xulrunner_1.9.1.10-1.debian.tar.gz
 8df7628c00b31ae1be2c03189252f07c989f7dee 8405188 xulrunner-1.9.1_1.9.1.10-1_amd64.deb
 80c7e9506fdda4d3e5fe07fe2356ac5169c36924 416896 libmozjs2d_1.9.1.10-1_amd64.deb
 d8b3820b6a0e2cf215aa191717433460f26e71a9 260666 libmozjs-dev_1.9.1.10-1_amd64.deb
 a4e723c880c0dbef6c572d30d029883583079651 1046222 libmozjs2d-dbg_1.9.1.10-1_amd64.deb
 8c47509922647850fe19572fbf6e5a13e6b30040 81702 spidermonkey-bin_1.9.1.10-1_amd64.deb
 701f1c4fdb1a4af6763ace807b0e70a8a539aac5 3470088 xulrunner-dev_1.9.1.10-1_amd64.deb
 4ba87ed78e2f93d1fab3b88fc7e9f7f8a2081141 56991620 xulrunner-1.9.1-dbg_1.9.1.10-1_amd64.deb
 b9ed3793b9b9b39a142af0a9baabd73ee5c793e2 1549732 libmozillainterfaces-java_1.9.1.10-1_all.deb
 c679ed98f4840884069af9b18ee29cfc3dab6093 161222 python-xpcom_1.9.1.10-1_amd64.deb
Checksums-Sha256: 
 0b41cd2dfcceeb773ea8c1609156855eb04802b75330583def455c6be3bfb12e 2080 xulrunner_1.9.1.10-1.dsc
 0067ec8a64501342e1f6b3b875624b53d9176f13e1592dfe2b96289dd9691fa3 41164807 xulrunner_1.9.1.10.orig.tar.bz2
 b97f672b460fd711b8fbba00fd84de6f4d5dba83051b6d33ade167ee8e98a776 221332 xulrunner_1.9.1.10-1.debian.tar.gz
 768ba45ca68831b8369c60c82c2763d0b03f5b935e53876a76f4bc408608011c 8405188 xulrunner-1.9.1_1.9.1.10-1_amd64.deb
 cd64c428f7c1af28d25485cce234396d6ccada19a9848cb90e74627719d2c4e2 416896 libmozjs2d_1.9.1.10-1_amd64.deb
 d2d94a890e735b996e5390710ba4686758edfb865623829133590c9d87ea5857 260666 libmozjs-dev_1.9.1.10-1_amd64.deb
 a01c6332c4ca7d74c0c3ce4f60233f169ff770adad115d0918efd4abea875308 1046222 libmozjs2d-dbg_1.9.1.10-1_amd64.deb
 14fd3cdd2ab09d435c0e6f986389e8813c618b30023eb3830b7b64d8928f6259 81702 spidermonkey-bin_1.9.1.10-1_amd64.deb
 78415637c144b04bc8dc620250307ddc6cebfc0b8b3d2b5032ef4cd6556e34f0 3470088 xulrunner-dev_1.9.1.10-1_amd64.deb
 c3acbcfa8d303d75752b688a684c568ba936fcfb3176eba23f3a9d7ddde39168 56991620 xulrunner-1.9.1-dbg_1.9.1.10-1_amd64.deb
 be1eeef4ada0e3ebdfcf47c02f30811602285f60820b1a6511a3b7504c811dbf 1549732 libmozillainterfaces-java_1.9.1.10-1_all.deb
 92af4d823b44064a1e46f3e238457504c6a968316e582a379e1542bf7cefd571 161222 python-xpcom_1.9.1.10-1_amd64.deb
Files: 
 1791289c7baa75dba8adf6585618f2cc 2080 devel optional xulrunner_1.9.1.10-1.dsc
 e24bc88eec358ecac4ec4e50bf191e92 41164807 devel optional xulrunner_1.9.1.10.orig.tar.bz2
 e523655a17fc2d7a8765a8b6251736c5 221332 devel optional xulrunner_1.9.1.10-1.debian.tar.gz
 17ce21a0f2ae205a16b1464aab11a60f 8405188 libs optional xulrunner-1.9.1_1.9.1.10-1_amd64.deb
 d94f93b7c8b25c6008697d9143275cc8 416896 libs optional libmozjs2d_1.9.1.10-1_amd64.deb
 ebc30519e54e69a71ec9e315f8bf66dd 260666 libdevel optional libmozjs-dev_1.9.1.10-1_amd64.deb
 0644f6b0b132232e82277bc35caf1edf 1046222 debug extra libmozjs2d-dbg_1.9.1.10-1_amd64.deb
 be8b4065d2e836ecb56372e5667ac077 81702 interpreters optional spidermonkey-bin_1.9.1.10-1_amd64.deb
 6ea85f3e63229b3591990bea56325d22 3470088 libdevel optional xulrunner-dev_1.9.1.10-1_amd64.deb
 5781980857f6f38b9aaf08800d677c83 56991620 debug extra xulrunner-1.9.1-dbg_1.9.1.10-1_amd64.deb
 e3652c91372ce43fa041207c97c40e51 1549732 java extra libmozillainterfaces-java_1.9.1.10-1_all.deb
 c28f0b8351c65c8af3ebe2007d381aec 161222 python extra python-xpcom_1.9.1.10-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iD8DBQFMIeaz3kvaLFT9KlgRAq9JAJ45vZQrWo32Gh5Dm1+RAPdgtcymBACbBLtX
agHm3Vo5/la+IYlj6FFQEN4=
=x0XJ
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.