[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#493678: marked as done (libtheora0: Code not built with -fpic or -fPIC)

Your message dated Sun, 27 Sep 2009 07:21:11 +0000
with message-id <E1Mro4F-0005ZY-1Y@ries.debian.org>
and subject line Bug#493678: fixed in libtheora 1.1.0-1
has caused the Debian Bug report #493678,
regarding libtheora0: Code not built with -fpic or -fPIC
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org

493678: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493678
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: libtheora0
Version: 1.0~beta3-1
Severity: important


The above URL has background information on the execmod denial from SE

The following command shows that some parts of the library have not been
comiled with -fpic or -fPIC, I believe that this will prevent it from
working on some architectures (it's also a minor security problem - and
it prevents using the library on SE Linux systems).

# eu-findtextrel /usr/lib/libtheora.so.0.3.3 |uniq
either the file containing the function 'theora_decode_init' or the file
containing the function 'theora_encode_header' is not compiled with

Below I have a cc command taken from the library build process, a simple
cc command to create a shared object, and a run of eu-findtextrel to
demonstrate that the problem is in the source file in question (it seems
that running against the entire shared object doesn't identify the right
function as the source of the problem):

cc -DHAVE_CONFIG_H -I. -I.. -I../include -I../lib -I../lib/dec \
-I../lib/enc -Wall -Wno-parentheses -O3 -fforce-addr \
-fomit-frame-pointer -finline-functions -funroll-loops -g -O2 -g -Wall \
-O2 -c enc/x86_32/dct_decode_mmx.c  -fPIC -fpic -DPIC -o \
cc -shared .libs/dct_decode_mmx.o -o t.so
eu-findtextrel t.so
enc/x86_32/dct_decode_mmx.c not compiled with -fpic/-fPIC

So it seems that assembly code in enc/x86_32/dct_decode_mmx.c is
responsible.  It would be ideal if this code could be fixed in time for

--- End Message ---
--- Begin Message ---
Source: libtheora
Source-Version: 1.1.0-1

We believe that the bug you reported is fixed in the latest version of
libtheora, which is due to be installed in the Debian FTP archive:

  to pool/main/libt/libtheora/libtheora-bin_1.1.0-1_i386.deb
  to pool/main/libt/libtheora/libtheora-dev_1.1.0-1_i386.deb
  to pool/main/libt/libtheora/libtheora-doc_1.1.0-1_all.deb
  to pool/main/libt/libtheora/libtheora0_1.1.0-1_i386.deb
  to pool/main/libt/libtheora/libtheora_1.1.0-1.diff.gz
  to pool/main/libt/libtheora/libtheora_1.1.0-1.dsc
  to pool/main/libt/libtheora/libtheora_1.1.0.orig.tar.gz

A summary of the changes between this version and the previous one is

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 493678@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
John Francesco Ferlito <johnf@inodes.org> (supplier of updated libtheora package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)

Hash: SHA1

Format: 1.8
Date: Sat, 26 Sep 2009 12:13:07 +1000
Source: libtheora
Binary: libtheora0 libtheora-dev libtheora-doc libtheora-bin
Architecture: source all i386
Version: 1.1.0-1
Distribution: unstable
Urgency: low
Maintainer: Debian Xiph.org Maintainers <pkg-xiph-maint@lists.alioth.debian.org>
Changed-By: John Francesco Ferlito <johnf@inodes.org>
 libtheora-bin - The Theora Video Compression Codec (example encoder, decoder)
 libtheora-dev - The Theora Video Compression Codec (development files)
 libtheora-doc - The Theora Video Compression Codec (documentation)
 libtheora0 - The Theora Video Compression Codec
Closes: 263442 493678
 libtheora (1.1.0-1) unstable; urgency=low
   [ John Francesco Ferlito ]
   * New upstream release.
   * debian/control:
     + Update Maintainer to Debian Xiph.org Maintainers.
     + Add John Francesco Ferlito to Uploaders.
     + Add transfig and texlive-latex-base as a Build-Dep so the .pdf builds.
   * debian/libtheora-doc.examples
     + Add examples to doc package (Closes: #263442).
   * debian/rules:
     + Remove unneeded rm of doxygen-build.stamp
   * debian/libtheora0.symbols*
     + Clean-up the duplication in the symbols files.
   * Upstream no longer contains relocatable code (Closes: #493678).
   [ Rogério Brito ]
   * debian/libtheora0.install:
     + simplify the rules to be more generic.
   * debian/control:
     + include versioned dependency on debhelper >= 5.
     + include ${misc:Depends} due to debhelper.
     + remove duplicate Section: fields.
     + include Homepage: field.
     + remove versioned dependency on cdbs (even oldstable and dapper have it).
     + remove versioned dependency on libogg-dev (idem).
   * debian/compat:
     + update to 5, as discussed above.
   * debian/patches:
     + include comment in the patch.
     + refreshed the patch.
   * debian/README.Source:
     + rename to README.source.
     + include comments regarding the use of quilt, as per policy >= 3.8.0.
   * debian/libtheora-doc*:
     + split the documentation in a documentation package, as it is "big".
   * debian/libtheora-doc.doc-base:
     + register with the system to keep things tidy.
   * debian/rules:
       + remove some extra files so that the package can be built twice in a row.
 4a38763bee734aff2e080882ac89bf6780b3c609 1444 libtheora_1.1.0-1.dsc
 f0cdffe9243996494828797d02f2a8bcacba99af 1961284 libtheora_1.1.0.orig.tar.gz
 206ee672d38f0d6d5b9d50c439f1aed9c2751c35 7563 libtheora_1.1.0-1.diff.gz
 11eaa153f5ddab85df7045a7837a0626155b874e 818442 libtheora-doc_1.1.0-1_all.deb
 1ba44423e332105dcedf9446e5ec3665f950074a 376670 libtheora0_1.1.0-1_i386.deb
 f941c6d39d49158a016e01ea8b25b9e7c62459f2 423342 libtheora-dev_1.1.0-1_i386.deb
 43eb3c8ab42e43a2136906704a99f216ecf3c29b 53892 libtheora-bin_1.1.0-1_i386.deb
 63fec3d5a7c60077009ef5ddef7e024ccb2924f9b7fdc5b2dd903b693b99a8f0 1444 libtheora_1.1.0-1.dsc
 5a68d5dee31a495ee6d25dca77315e6de515850036c079ac532e2b10d6e67b5e 1961284 libtheora_1.1.0.orig.tar.gz
 d09c8040746bc6205db440828d87d898e1f0caada6762f8e892d426dd71e2e63 7563 libtheora_1.1.0-1.diff.gz
 3a91f09b1141dbd84dccad2bbe97292ba6fc9282ee44962b971ca0e0f14d0f47 818442 libtheora-doc_1.1.0-1_all.deb
 ebc0bbb745eb987de557ab1d7cb1db8ad1215a87765131c5066edf0c24621645 376670 libtheora0_1.1.0-1_i386.deb
 61a4b7d1cd2c591de3bbed393f8688d3bc8775c1e4e0e5d14d00ea12a5850b83 423342 libtheora-dev_1.1.0-1_i386.deb
 6a2e1c642b4e697d9c7caf0d4bbe96c511ca7b0f0d43469131ecfd35b4b5246e 53892 libtheora-bin_1.1.0-1_i386.deb
 877629eb9f172599d52230d5a2bf97ee 1444 libs optional libtheora_1.1.0-1.dsc
 303c782de0f943bfceac1f0bdea7a22e 1961284 libs optional libtheora_1.1.0.orig.tar.gz
 9ca7334a8aeefd9f4520e9e1dc38f1e3 7563 libs optional libtheora_1.1.0-1.diff.gz
 2172a4a7cb988fffa849bd2b7a2fa0f1 818442 doc optional libtheora-doc_1.1.0-1_all.deb
 f12d40203d1c8241e9a42bab233fbef4 376670 libs optional libtheora0_1.1.0-1_i386.deb
 21225a3bea1dae032e8df66646f90ab7 423342 libdevel optional libtheora-dev_1.1.0-1_i386.deb
 4c0384d352d717df583cf5b11308fddf 53892 utils optional libtheora-bin_1.1.0-1_i386.deb

Version: GnuPG v1.4.9 (GNU/Linux)


--- End Message ---

Reply to: