Bug 298341 – media-video/ffmpeg-0.5_p20373 - mkdir .git/svn: Permission denied at /usr/libexec/git-core/git-svn line 5366

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Jonathan Barnard 2009-12-25 15:41:53 UTC]

media-video/ffmpeg-0.5_p20373 violations the sandbox when you have git with subverion flag on installed.

Something in the build script calls git-svn half way into compiling ffmpeg.
As ffmpeg does not depend on git with subversion flag on, so the git-svn call will just fail without stopping the compiling.

Reproducible: Always

Steps to Reproduce:
1. Install dev-util/git with subversion flag on.
2. emerge ffmpeg version 0.5_p20373.

Actual Results:  
You get a "ACCESS VIOLATION SUMMARY".


Portage 2.1.6.13 (default/linux/amd64/10.0, gcc-4.3.4, glibc-2.9_p20081201-r2, 2.6.31-gentoo-r6 x86_64)
=================================================================
System uname: Linux-2.6.31-gentoo-r6-x86_64-AMD_Athlon-tm-_7750_Dual-Core_Processor-with-gentoo-1.12.13
Timestamp of tree: Fri, 25 Dec 2009 11:30:22 +0000
ccache version 2.4 [enabled]
app-shells/bash:     4.0_p35
dev-lang/python:     2.6.4
dev-util/ccache:     2.4-r7
dev-util/cmake:      2.6.4-r3
sys-apps/baselayout: 1.12.13
sys-apps/sandbox:    1.6-r2
sys-devel/autoconf:  2.13, 2.63-r1
sys-devel/automake:  1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.2
sys-devel/binutils:  2.19.1-r1
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.6b
virtual/os-headers:  2.6.27-r2
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib64/tomoyo/conf /usr/share/X11/xkb /var/bind"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/udev/rules.d"
CXXFLAGS="-O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="ccache distlocks fixpackages parallel-fetch protect-owned sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://gentoo.virginmedia.com/ http://gentoo.tiscali.nl/ http://de-mirror.org/distro/gentoo/ http://gentoo.mneisen.org/"
LDFLAGS="-Wl,-O1"
LINGUAS="en_GB en"
MAKEOPTS="-j4"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_EXTRA_OPTS="--quiet"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/dev/shm"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage/layman/armagetron /usr/local/portage/layman/suka /usr/local/portage/local"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X a52 aac acl acpi alsa amd64 aspell avahi bash-completion berkdb bzip2 cdda cdr cli cracklib crypt cups cxx dbus dhcpcd djvu dri dvd dvdr encode ffmpeg flac fortran gdbm gif git gnome gnutls gpm gstreamer gtk hal hddtemp hdri iconv imap ipv6 jbig jpeg jpeg2k kerberos ldap lm_sensors lzma lzo mad mikmod mmx modules mp3 mp4 mpeg mudflap multilib nautilus ncurses nls nptl nptlonly nvidia ogg opengl openmp pam pcre perl png pppd python rar readline reflection samba sdl sensord session spell spl sse sse2 ssl subversion svg sysfs tcpd tga theora threads tiff truetype unicode vorbis x264 xorg xvmc zeroconf zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en_GB en" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="nvidia nv"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LANG, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS

[Comment 1 Jonathan Barnard 2009-12-25 15:48:54 UTC]

Created attachment 214135 [details]
build.log

[Comment 2 Jeroen Roovers (RETIRED) 2009-12-26 16:39:58 UTC]

(In reply to comment #0)
> media-video/ffmpeg-0.5_p20373 violations the sandbox when you have git with
> subverion flag on installed.
> 
> Something in the build script calls git-svn half way into compiling ffmpeg.
> As ffmpeg does not depend on git with subversion flag on, so the git-svn call
> will just fail without stopping the compiling.

It happens straight after src_compile() calls emake as well, so it isn't really relevant if it tries the same thing again half way through. :)

[Comment 3 Jonathan Barnard 2010-01-14 06:08:03 UTC]

I had a local git tree in root folder ('/'). Moving the folder out of way fixes this error. Trying to emerge coreutils gives a error which can be fixed the same way.

So.. Why does a git tree in your root folder mess up emerge some packages?

[Comment 4 Maxim P. Dementiev 2010-05-02 07:17:58 UTC]

(In reply to comment #3)
> I had a local git tree in root folder ('/'). Moving the folder out of way fixes
> this error. Trying to emerge coreutils gives a error which can be fixed the
> same way.
> 
> So.. Why does a git tree in your root folder mess up emerge some packages?
> 

I have the same problem with ".git" in "/".
Does it mean that sandbox should do extra work preventing ".git" to be seen by the built?