Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 862528 - imlib2{,_loaders}-1.7.5 stabilization request
Summary: imlib2{,_loaders}-1.7.5 stabilization request
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Stabilization (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Andrew Savchenko
URL:
Whiteboard:
Keywords: CC-ARCHES
Depends on: 827478 828875 828879 828892 828926 828962 833171 833701 862531 877777
Blocks:
  Show dependency tree
 
Reported: 2022-07-31 12:31 UTC by Andrew Savchenko
Modified: 2023-01-13 16:31 UTC (History)
2 users (show)

See Also:
Package list:
media-libs/imlib2-1.7.5-r1 media-plugins/imlib2_loaders-1.7.5 amd64 x86
Runtime testing required: No
nattka: sanity-check+


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Andrew Savchenko gentoo-dev 2022-07-31 12:31:56 UTC
Arch teams, please stabilize.
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-07-31 12:34:14 UTC
This version broke a fair amount of packages so we need to be careful to stable fixes first.
Comment 2 NRK 2022-07-31 13:07:25 UTC
Hi,

One of the loaders (xpm) in Imlib2 1.7.5 had a bad bug where it was `memmem`-ing potentially gigabytes of data. Which would result in freezes when someone tried to open, let's say a directory. [0]

IMO, it's best to skip this version and stabilize 1.9.0 instead (which has been in tree for ~3months now). And if we *are* to stabilize this, I would recommend back-porting this patch [1].

[0]: https://codeberg.org/nsxiv/nsxiv-record/issues/218#issuecomment-475621
[1]: https://git.enlightenment.org/old/legacy-imlib2/commit/ac59f89870ffab9739a0cde70b0787c5e53cddf3
Comment 3 Andrew Savchenko gentoo-dev 2022-07-31 14:11:40 UTC
(In reply to Nickolas Raymond Kaczynski from comment #2)
> IMO, it's best to skip this version and stabilize 1.9.0 instead (which has
> been in tree for ~3months now). And if we *are* to stabilize this, I would
> recommend back-porting this patch [1].

Stabilizing 1.9.0 will break imlib2_loaders, which require the same version of imlib2 to be present. Unfortunately imlib2-1.9.0 was added without imlib2_loaders update by external contribution.

I will add imlib2-{,_loaders}-1.9.1 soon, but it will take a usual 30-day timeout before stabilization can be done.
Comment 4 NRK 2022-07-31 15:08:53 UTC
(In reply to Andrew Savchenko from comment #3)
> Stabilizing 1.9.0 will break imlib2_loaders, which require the same version
> of imlib2 to be present. Unfortunately imlib2-1.9.0 was added without
> imlib2_loaders update by external contribution.
> 
> I will add imlib2-{,_loaders}-1.9.1 soon, but it will take a usual 30-day
> timeout before stabilization can be done.

Ah, I see. In that case I'd just backport that patch. Or does backporting a patch also reset the stabilization timeout?
Comment 5 Andrew Savchenko gentoo-dev 2022-07-31 15:32:30 UTC
(In reply to Nickolas Raymond Kaczynski from comment #4)
> (In reply to Andrew Savchenko from comment #3)
> > Stabilizing 1.9.0 will break imlib2_loaders, which require the same version
> > of imlib2 to be present. Unfortunately imlib2-1.9.0 was added without
> > imlib2_loaders update by external contribution.
> > 
> > I will add imlib2-{,_loaders}-1.9.1 soon, but it will take a usual 30-day
> > timeout before stabilization can be done.
> 
> Ah, I see. In that case I'd just backport that patch. Or does backporting a
> patch also reset the stabilization timeout?

Usually any change which changes installed binary requires revision bump and any revision bump requires stabilization. There are exceptions for small changes (typos, minor files) and in exceptional cases committing straight to stable is possible, but this is not such case.

In our case as sam has pointed out 1.7.5 update broke some packages (that was due to imlib2-config removal in favour of more standard imlib2.pc approach), so we need to wait for their update to be stabilized first. As I see we are waiting for w3m for now. So there is no need to backport patch until they are fixed and stabilized, which will make some time as well.
Comment 6 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-08-01 03:20:21 UTC
Given we can't always be around, it makes sense to add a comment to the ebuild then.
Comment 7 Larry the Git Cow gentoo-dev 2022-08-01 03:24:06 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f2a68ba41c253c96a0da6a86ecc691ded02ae40e

commit f2a68ba41c253c96a0da6a86ecc691ded02ae40e
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2022-08-01 03:21:20 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-08-01 03:21:20 +0000

    media-libs/imlib2: add note to bump with media-plugins/imlib2_loaders
    
    Bug: https://bugs.gentoo.org/862528
    Signed-off-by: Sam James <sam@gentoo.org>

 media-libs/imlib2/imlib2-1.9.1.ebuild | 2 ++
 1 file changed, 2 insertions(+)
Comment 8 NRK 2022-08-01 08:26:41 UTC
(In reply to Andrew Savchenko from comment #3)
> Unfortunately imlib2-1.9.0 was added without
> imlib2_loaders update by external contribution.

Ah yes, I remember now. That was actually me!

I *was* aware of `imlib2-loaders` but v1.9.0 turned out to be a pain in the ass due to some of the new dependencies being related to rust + my inexperience with autohell. So by the time I was done with the ebuild `imlib2-loaders` totally escaped my mind.

> it makes sense to add a comment to the ebuild then.

I agree, it would make such errors less likely in the future.
Comment 9 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-10-10 22:08:45 UTC
Ready now?
Comment 10 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-10-13 22:45:53 UTC
arm done
Comment 11 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-10-13 23:00:51 UTC
arm64 done
Comment 12 Jakov Smolić archtester gentoo-dev 2022-10-15 07:06:42 UTC
x86 done
Comment 13 Jakov Smolić archtester gentoo-dev 2022-10-20 19:00:06 UTC
amd64 done
Comment 14 Arthur Zamarin archtester Gentoo Infrastructure gentoo-dev Security 2022-10-20 19:06:18 UTC
ppc64 done
Comment 15 ernsteiswuerfel archtester 2022-12-01 18:55:38 UTC
Looking good on ppc.

 # cat imlib2-862528.report 
USE tests started on Do 1. Dez 18:54:35 CET 2022

FEATURES=' test' USE='' succeeded for =media-libs/imlib2-1.7.5
USE='X -bzip2 -doc -gif jpeg -mp3 -png -shm -static-libs -tiff -webp -zlib' succeeded for =media-libs/imlib2-1.7.5
USE='X bzip2 -doc gif -jpeg mp3 -png shm -static-libs -tiff -webp -zlib' succeeded for =media-libs/imlib2-1.7.5
USE='-X bzip2 doc -gif -jpeg -mp3 -png -shm static-libs tiff -webp -zlib' succeeded for =media-libs/imlib2-1.7.5
USE='X -bzip2 doc gif jpeg -mp3 -png -shm -static-libs -tiff webp -zlib' succeeded for =media-libs/imlib2-1.7.5
USE='X bzip2 doc -gif -jpeg mp3 png shm static-libs -tiff webp -zlib' succeeded for =media-libs/imlib2-1.7.5
USE='X bzip2 doc -gif -jpeg mp3 png -shm static-libs tiff webp -zlib' succeeded for =media-libs/imlib2-1.7.5
USE='-X -bzip2 -doc -gif -jpeg mp3 -png -shm static-libs tiff -webp zlib' succeeded for =media-libs/imlib2-1.7.5
USE='-X bzip2 doc gif -jpeg -mp3 png -shm -static-libs -tiff webp zlib' succeeded for =media-libs/imlib2-1.7.5
USE='X bzip2 doc -gif -jpeg -mp3 -png -shm static-libs -tiff webp zlib' succeeded for =media-libs/imlib2-1.7.5
USE='X bzip2 doc -gif -jpeg mp3 -png -shm static-libs -tiff webp zlib' succeeded for =media-libs/imlib2-1.7.5
USE='-X -bzip2 -doc gif -jpeg -mp3 -png -shm -static-libs tiff webp zlib' succeeded for =media-libs/imlib2-1.7.5
USE='X bzip2 -doc gif -jpeg -mp3 -png shm static-libs tiff webp zlib' succeeded for =media-libs/imlib2-1.7.5

revdep tests started on Do 1. Dez 19:05:41 CET 2022

FEATURES=' test' USE='-gdk-pixbuf imlib' succeeded for www-client/w3m
FEATURES=' test' USE='' succeeded for x11-misc/xfishtank
FEATURES=' test' USE='' succeeded for x11-misc/skippy
FEATURES=' test' USE='imlib' succeeded for x11-wm/openbox
FEATURES=' test' USE='' succeeded for x11-misc/hsetroot
FEATURES=' test' USE='' succeeded for media-libs/giblib
FEATURES=' test' USE='' succeeded for dev-perl/Image-Imlib2
FEATURES=' test' USE='imlib' succeeded for media-libs/libcaca
FEATURES=' test' USE='' succeeded for x11-misc/fbdesk
FEATURES=' test' USE='' succeeded for x11-plugins/wmcoincoin
Comment 16 Arthur Zamarin archtester Gentoo Infrastructure gentoo-dev Security 2022-12-11 17:52:26 UTC
ppc done
Comment 17 NATTkA bot gentoo-dev 2022-12-16 01:44:26 UTC Comment hidden (obsolete)
Comment 18 NATTkA bot gentoo-dev 2022-12-16 01:48:28 UTC Comment hidden (obsolete)
Comment 19 Sophie Hamilton 2022-12-19 13:43:50 UTC
Quick note: I've found a bug in imlib2-1.7.5 which has the capacity to lead to certain window managers crashing which seems to be fixed in 1.9.1; I've opened a separate bug at bug 887201.
Comment 20 Arthur Zamarin archtester Gentoo Infrastructure gentoo-dev Security 2023-01-13 16:31:53 UTC
sparc done

all arches done