Bug#999738: runtime deps on -dev library symlinks not caught

[Felix Lechner <felix.lechner@lease-up.com>]

Hi Bdale,

On Mon, Nov 15, 2021 at 11:06 AM Bdale Garbee <bdale@gag.com> wrote:
>
> Makefile.am ... resulted in binaries ... having
> a run-time dependency on the symlinks provided in the library -dev
> package instead of the ".0" version .. in the
> actual library packages.

Do you have the output of 'readelf --all --wide' [1] for one of those binaries?

I am especially interested in the NEEDED field from the "Dynamic
Section." [2][3] The tag 'undeclared-elf-prerequisites' [4] can
probably be expanded to cover your condition of insufficient
prerequisites (instead of none at all).

Your condition involves sonames that I believe are customarily
provided by links in '-dev' installables instead of regular shared
library packages.

I would adjust that logic there. [5] In particular, I would refine the
conditional:

    if @{$item->elf->{NEEDED} // [] }
    && $depends->is_empty;

What do you think, please? Thanks!

Kind regards
Felix Lechner

[1] https://salsa.debian.org/lintian/lintian/-/blob/master/lib/Lintian/Index/Elf.pm#L85
[2] https://salsa.debian.org/lintian/lintian/-/blob/master/lib/Lintian/Index/Elf.pm#L215
[3] https://salsa.debian.org/lintian/lintian/-/blob/master/lib/Lintian/Index/Elf.pm#L445
[4] https://salsa.debian.org/lintian/lintian/-/blob/master/tags/u/undeclared-elf-prerequisites.tag
[5] https://salsa.debian.org/lintian/lintian/-/blob/master/lib/Lintian/Check/Binaries/Prerequisites.pm#L108-113