[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#803109: gcc-5: If compiled with gcc-5, GnuPG classic cannot import certain public keys



Package: gcc-5
Version: 5.2.1-22
Severity: normal
Tags: upstream

Dear Maintainer,

I noticed that on Debian testing, I cannot import a certain public key into
gnupg-1.4.19 that I can import on Debian stable. This is how the bug is
triggered:

$ gpg --recv-key 67F41449
gpg: requesting key 67F41449 from hkp server keys.gnupg.net
gpg: DBG: armor-keys-failed (KEY 0x67F41449 BEGIN
) ->0
gpg: DBG: armor-keys-failed (KEY 0x67F41449 END
) ->0
gpg: assuming bad signature from key 67F41449 due to an unknown critical bit
gpg: assuming bad signature from key 67F41449 due to an unknown critical bit
gpg: key 67F41449: no valid user IDs
gpg: this may be caused by a missing self-signature
gpg: Total number processed: 1
gpg:           w/o user IDs: 1
$ gpg --list-key 67F41449
gpg: error reading key: public key not found

When I compiled vanilla versions of recent GnuPG classic releases, noting changed.
Only after I did `./configure CC=gcc-4.9`, the key could be imported:

$ gpg --recv-key 67F41449
gpg: requesting key 67F41449 from hkp server keys.gnupg.net
gpg: DBG: armor-keys-failed (KEY 0x67F41449 BEGIN
) ->0
gpg: DBG: armor-keys-failed (KEY 0x67F41449 END
) ->0
gpg: key 67F41449: public key "Xxx Yyy <xxx.yyy@zzz.invalid>" imported
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)
$ gpg --list-key 67F41449 >/dev/null && echo works
works

GnuPG's test suite currently does not catch this bug, i.e. `make check`
succeeds in any case.

-- System Information:
Debian Release: stretch/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.2.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages gcc-5 depends on:
ii  binutils      2.25.1-7
ii  cpp-5         5.2.1-22
ii  gcc-5-base    5.2.1-22
ii  libc6         2.19-22
ii  libcc1-0      5.2.1-22
ii  libgcc-5-dev  5.2.1-22
ii  libgcc1       1:5.2.1-22
ii  libgmp10      2:6.0.0+dfsg-7
ii  libisl13      0.14-2
ii  libmpc3       1.0.3-1
ii  libmpfr4      3.1.3-1
ii  libstdc++6    5.2.1-22
ii  zlib1g        1:1.2.8.dfsg-2+b1

Versions of packages gcc-5 recommends:
ii  libc6-dev  2.19-22

Versions of packages gcc-5 suggests:
pn  gcc-5-doc         <none>
pn  gcc-5-locales     <none>
pn  gcc-5-multilib    <none>
pn  libasan2-dbg      <none>
pn  libatomic1-dbg    <none>
pn  libcilkrts5-dbg   <none>
pn  libgcc1-dbg       <none>
pn  libgomp1-dbg      <none>
pn  libitm1-dbg       <none>
pn  liblsan0-dbg      <none>
pn  libmpx0-dbg       <none>
pn  libquadmath0-dbg  <none>
pn  libtsan0-dbg      <none>
pn  libubsan0-dbg     <none>

-- no debconf information


Reply to: