Bug#701702: lintian: warn if debian/shlibs.local references foreign packages

[Sven Joachim <svenjoac@gmx.de>]

Package: lintian
Version: 2.5.10.4
Severity: wishlist

There are ~70 source packages in unstable/main which contain
debian/shlibs.local.  It seems that most of them are library packages
where this file contains information about packages actually shipped
from the same source, and AFAIK there is nothing really wrong with that,
although it could be considered bad style.

However, there are also cases where shlibs.local is used to override
information provided by _other_ packages, and this practice should be
strongly discouraged since it can lead to wrong dependencies; see
#583551 for an example, or #701627 for a problem I found myself.  In
other cases, shlibs.local is just cruft, referencing packages which no
longer exist (see #701696, for instance).

It would be great if lintian could detect when debian/shlibs.local
references packages not built from the same source and issue a warning
for that.

See also the thread starting at
http://lists.debian.org/debian-qa/2008/12/threads.html#00063.


-- System Information:
Debian Release: 7.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (101, 'experimental')
Architecture: i386 (x86_64)

Kernel: Linux 3.7.10-rc1-nouveau (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages lintian depends on:
ii  binutils                       2.22-8
ii  bzip2                          1.0.6-4
ii  diffstat                       1.55-3
ii  file                           5.11-2
ii  gettext                        0.18.1.1-10
ii  hardening-includes             2.3
ii  intltool-debian                0.35.0+20060710.1
ii  libapt-pkg-perl                0.1.26+b1
ii  libarchive-zip-perl            1.30-6
ii  libc-bin                       2.13-38
ii  libclass-accessor-perl         0.34-1
ii  libclone-perl                  0.31-1+b2
ii  libdigest-sha-perl             5.71-2
ii  libdpkg-perl                   1.16.9
ii  libemail-valid-perl            0.190-1
ii  libipc-run-perl                0.92-1
ii  libparse-debianchangelog-perl  1.2.0-1
ii  libtimedate-perl               1.2000-1
ii  liburi-perl                    1.60-1
ii  locales                        2.13-38
ii  man-db                         2.6.3-3
ii  patchutils                     0.3.2-1.1
ii  perl [libdigest-sha-perl]      5.14.2-18

lintian recommends no packages.

Versions of packages lintian suggests:
pn  binutils-multiarch     <none>
ii  dpkg-dev               1.16.9
ii  libhtml-parser-perl    3.69-2
pn  libperlio-gzip-perl    <none>
ii  libtext-template-perl  1.45-2
ii  man-db                 2.6.3-3
ii  xz-utils [lzma]        5.1.1alpha+20120614-2

-- no debconf information