Bug 723216 – dev-perl/Convert-UUlib calls ar directly

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Agostino Sarubbo 2020-05-15 09:41:24 UTC]

This is an auto-filed bug because dev-perl/Convert-UUlib calls ar directly.
The issue was originally discovered on amd64, but it may be reproducible on other arches as well.
If you think that a different summary clarifies the issue better, feel free to change it.
Attached build log and emerge --info.

NOTE:
If you think it doesn't make sense fix these type of issues, I'd like to point out that won't be possible use a different AR implementation (like llvm-ar) by setting the AR variable. So this issue has been reproduced by setting the AR variable to x86_64-pc-linux-gnu-ar and by removing the /usr/bin/ar binary.

[Comment 1 Agostino Sarubbo 2020-05-15 09:41:32 UTC]

Created attachment 639310 [details]
build.log

build log and emerge --info

[Comment 2 Larry the Git Cow 2020-05-21 18:53:39 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=46d76f54d6fbf257d0f1233fbbf30b0bf0b564a3

commit 46d76f54d6fbf257d0f1233fbbf30b0bf0b564a3
Author:     Kent Fredric <[e-mail]>
AuthorDate: 2020-05-21 18:44:46 +0000
Commit:     Kent Fredric <[e-mail]>
CommitDate: 2020-05-21 18:50:41 +0000

    dev-perl/Convert-UUlib: Bump to version 1.710.0
    
    - EAPI7
    - Drop USE="system-uulib" due to being completely broken and unfixable
    - Fix directly calling `ar` and inherit Perl's `ar`
    - Attempt to correct a dizzying array of license terms
    
    Upstream:
    - Fix heap overflow
    - Fix format string type missmatches
    - Simplify code in _FP_gets to not use fscanf for performance
    - Backport code to c89
    - Add GetFileList
    - experimental perlmulticore support
    - Speedup yEnc encoding using slice-by-16 instead of crc32
    
    Bug: https://bugs.gentoo.org/559930
    Bug: https://bugs.gentoo.org/723216
    Package-Manager: Portage-2.3.99, Repoman-2.3.22
    Signed-off-by: Kent Fredric <[e-mail]>

 .../Convert-UUlib/Convert-UUlib-1.710.0.ebuild     | 31 ++++++++++++++++++++++
 dev-perl/Convert-UUlib/Manifest                    |  1 +
 .../files/Convert-UUlib-1.71-tc-ar.patch           | 25 +++++++++++++++++
 3 files changed, 57 insertions(+)

[Comment 3 Larry the Git Cow 2020-06-20 03:10:29 UTC]

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f86bf1c11c58fa8e4f08f59512960dcaafe626a5

commit f86bf1c11c58fa8e4f08f59512960dcaafe626a5
Author:     Kent Fredric <[e-mail]>
AuthorDate: 2020-06-20 03:09:36 +0000
Commit:     Kent Fredric <[e-mail]>
CommitDate: 2020-06-20 03:09:58 +0000

    dev-perl/Convert-UUlib: Cleanup old 1.{4,5}00.0-r1 re bug #724494
    
    Removing versions affected by heap overflow issues
    
    Bug: https://bugs.gentoo.org/724494
    Closes: https://bugs.gentoo.org/723216
    Package-Manager: Portage-2.3.100, Repoman-2.3.22
    Signed-off-by: Kent Fredric <[e-mail]>

 .../Convert-UUlib/Convert-UUlib-1.400.0-r1.ebuild  | 17 ----------
 .../Convert-UUlib/Convert-UUlib-1.500.0-r1.ebuild  | 35 --------------------
 dev-perl/Convert-UUlib/Manifest                    |  2 --
 .../files/Convert-UUlib-1.500.0-unbundle.patch     | 37 ----------------------
 dev-perl/Convert-UUlib/metadata.xml                |  3 --
 5 files changed, 94 deletions(-)