Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 289014 - Stabilize sys-devel/dev86-0.16.17-r6 due to buffer overflows in current stable
Summary: Stabilize sys-devel/dev86-0.16.17-r6 due to buffer overflows in current stable
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High enhancement with 1 vote (vote)
Assignee: No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it
URL:
Whiteboard:
Keywords: STABLEREQ
Depends on:
Blocks: 288621
  Show dependency tree
 
Reported: 2009-10-14 07:46 UTC by Jaak Ristioja
Modified: 2009-11-09 12:46 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jaak Ristioja 2009-10-14 07:46:49 UTC
#256782 has been around for too long!
Comment 1 Gordon Malm (RETIRED) gentoo-dev 2009-10-16 18:39:32 UTC
This needs to be done for bug #288621.
Comment 2 Yuri Sevatz 2009-10-17 22:17:54 UTC
amd64 stable
Comment 3 Yuri Sevatz 2009-10-17 22:21:12 UTC
I should add that the gcc-4.3.4 upgrade i did last night, from the stable tree required recompiling everything... and the current stable version of dev86-0.16.17-r5 buffer bug choked my `emerge -eav world` halfway through a 900-package pull.  Not too pleasant to wake up and find that :/
Comment 4 Sebastian Luther (few) 2009-10-18 07:04:39 UTC
(In reply to comment #3)
> I should add that the gcc-4.3.4 upgrade i did last night, from the stable tree
> required recompiling everything... 

There is no need to recompile everything because of this update.

and the current stable version of
> dev86-0.16.17-r5 buffer bug choked my `emerge -eav world` halfway through a
> 900-package pull.  Not too pleasant to wake up and find that :/
> 

You could have keyworded the new version yourself locally.
Comment 5 Jaak Ristioja 2009-10-18 08:00:24 UTC
(In reply to comment #4)
> (In reply to comment #3)
> > I should add that the gcc-4.3.4 upgrade i did last night, from the stable tree
> > required recompiling everything... 
> 
> There is no need to recompile everything because of this update.
This doesn't make the bug go away. One might also want to optimize his/her system to the maximum, hoping that a new version of gcc will help, change his/her C(XX)FLAGS etc which might require recompiling everything.

> and the current stable version of
> > dev86-0.16.17-r5 buffer bug choked my `emerge -eav world` halfway through a
> > 900-package pull.  Not too pleasant to wake up and find that :/
> > 
> 
> You could have keyworded the new version yourself locally.
Yes, definitely if one was psychic enough to foresee this bug. That is not the solution.

When one issues a "emerge -e world", he/she expects this command to re-emerge those 900 packages successfully in, lets say, 12 hours. Its a major failure if only 90 of those packages get emerged in a hour and an error occurs. Twelve hours later the administrator might come back and discover that he/she is 12 hours behind schedule. Not good. That was actually the motivation for me to file this bug.
Comment 6 Sebastian Luther (few) 2009-10-18 08:11:12 UTC
(In reply to comment #5)
> When one issues a "emerge -e world", he/she expects this command to re-emerge
> those 900 packages successfully in, lets say, 12 hours. Its a major failure if
> only 90 of those packages get emerged in a hour and an error occurs. Twelve
> hours later the administrator might come back and discover that he/she is 12
> hours behind schedule. Not good. That was actually the motivation for me to
> file this bug.
> 

That's what --keep-going was invented for.

Comment 7 Christian Faulhammer (RETIRED) gentoo-dev 2009-10-18 09:35:38 UTC
x86 stable, sorry for the hassle, but proper bug dependencies would be fine. 
Anyway, fixed on x86.
Comment 8 Yuri Sevatz 2009-10-18 22:32:23 UTC
(In reply to comment #6)
> (In reply to comment #5)
> > When one issues a "emerge -e world", he/she expects this command to re-emerge
> > those 900 packages successfully in, lets say, 12 hours. Its a major failure if
> > only 90 of those packages get emerged in a hour and an error occurs. Twelve
> > hours later the administrator might come back and discover that he/she is 12
> > hours behind schedule. Not good. That was actually the motivation for me to
> > file this bug.
> > 
> 
> That's what --keep-going was invented for.
> 

Thanks for the info! :)

Without siding on any case (being pshchic, using emerge more carefully, etc) - I think what we can all agree on is that this is package is a compiler, and will undoubtedly get pulled at critical times, which means that having an ugly duckling sitting in stable and a healthy one in unstable makes absolutely no sense.

With that said, the amd64 version works great - please mark as stable :)
Comment 9 Markus Meier gentoo-dev 2009-11-09 12:46:52 UTC
amd64 stable, all arches done.