Debian Bug report logs - #646258
dynare: FTBFS with -Werror=format-security

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Julian Taylor <jtaylor.debian@googlemail.com>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: dynare: FTBFS with -Werror=format-security

Date: Sat, 22 Oct 2011 20:23:41 +0200

[Message part 1 (text/plain, inline)]

Source: dynare
Version: 4.2.2-1
Severity: normal
User: debian-qa@lists.debian.org
Usertags: hardening-format-security hardening

the package dynare fails to compile with the new hardened compiler flags
dpkg-buildflag outputs [0].
The problematic flag is: -Werror=format-security
See the ubuntu buildlog:
https://launchpadlibrarian.net/83127971/buildlog_ubuntu-precise-i386.dynare_4.2.2-1_FAILEDTOBUILD.txt.gz
Snippet:
SylvException.cpp: In member function 'void
SylvException::printMessage() const':
SylvException.cpp:29:12: error: format not a string literal and no
format arguments [-Werror=format-security]
cc1plus: some warnings being treated as errors

The buildflags are not exported in debian, but can be enabled e.g. by
adding this to debian/rules:

 DPKG_EXPORT_BUILDFLAGS = 1
 include /usr/share/dpkg/buildflags.mk

Please fix the issues and maybe also enable the hardened build in debian.

[0] http://lists.debian.org/debian-devel-announce/2011/09/msg00001.html

[signature.asc (application/pgp-signature, attachment)]

Message #10 received at 646258-close@bugs.debian.org (full text, mbox, reply):

From: Sébastien Villemot <sebastien.villemot@ens.fr>

To: 646258-close@bugs.debian.org

Subject: Bug#646258: fixed in dynare 4.2.2-2

Date: Mon, 07 Nov 2011 16:17:51 +0000

Source: dynare
Source-Version: 4.2.2-2

We believe that the bug you reported is fixed in the latest version of
dynare, which is due to be installed in the Debian FTP archive:

dynare-common_4.2.2-2_all.deb
  to main/d/dynare/dynare-common_4.2.2-2_all.deb
dynare-doc_4.2.2-2_all.deb
  to main/d/dynare/dynare-doc_4.2.2-2_all.deb
dynare-matlab_4.2.2-2_all.deb
  to contrib/d/dynare/dynare-matlab_4.2.2-2_all.deb
dynare_4.2.2-2.debian.tar.gz
  to main/d/dynare/dynare_4.2.2-2.debian.tar.gz
dynare_4.2.2-2.dsc
  to main/d/dynare/dynare_4.2.2-2.dsc
dynare_4.2.2-2_amd64.deb
  to main/d/dynare/dynare_4.2.2-2_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 646258@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sébastien Villemot <sebastien.villemot@ens.fr> (supplier of updated dynare package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 07 Nov 2011 16:15:32 +0100
Source: dynare
Binary: dynare dynare-common dynare-doc dynare-matlab
Architecture: source amd64 all
Version: 4.2.2-2
Distribution: unstable
Urgency: low
Maintainer: Debian Octave Group <pkg-octave-devel@lists.alioth.debian.org>
Changed-By: Sébastien Villemot <sebastien.villemot@ens.fr>
Description: 
 dynare     - platform for handling a wide class of economic models
 dynare-common - platform for handling a wide class of economic models
 dynare-doc - documentation for Dynare
 dynare-matlab - MATLAB support for Dynare
Closes: 646258
Changes: 
 dynare (4.2.2-2) unstable; urgency=low
 .
   * debian/patches/hardening-ftbfs: patch for FTBFS with -Werror=format-security
     (Closes: #646258)
   * debian/rules: build with compilation flags from dpkg-buildflags.
     In particular, with dpkg >= 1.16.1, this enables hardening compilation flags
Checksums-Sha1: 
 b152abccb5dab687faaf2cd879881fd6b6c32cc0 2458 dynare_4.2.2-2.dsc
 50ca9458299752be403bcbea3636836d03995965 12577 dynare_4.2.2-2.debian.tar.gz
 e4b3d942fe3417bfbef57094a6c0d193375e41b8 1550982 dynare_4.2.2-2_amd64.deb
 7b961265196e712885c48c420ae65415a5921775 367380 dynare-common_4.2.2-2_all.deb
 08fc43fea5487d8a1d87880ebcdd7be01c34d4af 6166330 dynare-doc_4.2.2-2_all.deb
 a98b3db0e20ada4d68fcf99246ebe0cdaa2967f7 458284 dynare-matlab_4.2.2-2_all.deb
Checksums-Sha256: 
 f5e563a410bcfab3c7ebf77256ee646cef5fd87f8434fb24d10e4a0fd6328b35 2458 dynare_4.2.2-2.dsc
 9d55b76c4ee6ebd75c02377b284ba61b87f10f46b60553faebe3c4ae958aad56 12577 dynare_4.2.2-2.debian.tar.gz
 69cb0ba8583ec55c5647070ac7d2c86741209cc48b82236cabcbbe8f4a89e83c 1550982 dynare_4.2.2-2_amd64.deb
 397da0129a61ca654434e16b39a7a1ef2ae06837fee13a4bd372a4ba7161f133 367380 dynare-common_4.2.2-2_all.deb
 9ba56b293b8114962b553d46e4dd776d2c0e7086000b418716226c87f0880093 6166330 dynare-doc_4.2.2-2_all.deb
 3bf425d2bf44b3aba90ca2d8f88a622c195902a140f4a55546dad8f81b102c19 458284 dynare-matlab_4.2.2-2_all.deb
Files: 
 09f9f7229f41dc74f9fd9ff2fabc6f8a 2458 math optional dynare_4.2.2-2.dsc
 fd9cceedd349773918d6e5c472fd38ac 12577 math optional dynare_4.2.2-2.debian.tar.gz
 78c7d263bed267ada998eceae6a51902 1550982 math optional dynare_4.2.2-2_amd64.deb
 cda2f5fdd053935e6284680f067815e9 367380 math optional dynare-common_4.2.2-2_all.deb
 d9966d4c45cff30051ecfb71c4b3a8ea 6166330 doc optional dynare-doc_4.2.2-2_all.deb
 cd1b666c43d17ffa4fd85a9c98eb09f5 458284 contrib/math optional dynare-matlab_4.2.2-2_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=pdRN
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.