[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#962388: marked as done (ITP: re2j -- linear-time regular expression matching in Java)

Your message dated Wed, 28 Oct 2020 11:00:15 +0000
with message-id <E1kXjBf-000HsS-VK@fasolo.debian.org>
and subject line Bug#962388: fixed in re2j 1.5+dfsg-1
has caused the Debian Bug report #962388,
regarding ITP: re2j -- linear-time regular expression matching in Java
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
962388: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=962388
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- Package: wnpp
Severity: wishlist
X-Debbugs-CC: debian-java@lists.debian.org

* Package name    : re2j
  Version         : 1.3
  Upstream Author : The Go Authors
* URL             : https://github.com/google/re2j
* License         : BSD-3
  Programming Lang: Java
  Description     : linear-time regular _expression_ matching in Java

RE2 is a regular _expression_ engine that runs in time linear in the size of the input. RE2/J is a port of RE2 to pure Java.

Java's standard regular _expression_ package, java.util.regex, and many other widely used regular _expression_ packages such as PCRE, Perl and Python use a backtracking implementation strategy: when a pattern presents two alternatives such as a|b, the engine will try to match subpattern a first, and if that yields no match, it will reset the input stream and try to match b instead.

If such choices are deeply nested, this strategy requires an exponential number of passes over the input data before it can detect whether the input matches. If the input is large, it is easy to construct a pattern whose running time would exceed the lifetime of the universe. This creates a security risk when accepting regular _expression_ patterns from untrusted sources, such as users of a web application.

In contrast, the RE2 algorithm explores all matches simultaneously in a single pass over the input data by using a nondeterministic finite automaton.

There are certain features of PCRE or Perl regular expressions that cannot be implemented in linear time, for example, backreferences, but the vast majority of regular expressions patterns in practice avoid such features.


This package is a dependency of the netCDF Java library.

It will be maintained under the umbrella of the Java Maintainers Team.
--- End Message ---
--- Begin Message --- 
Source: re2j
Source-Version: 1.5+dfsg-1
Done: Vincent Prat <vivi@debian.org>

We believe that the bug you reported is fixed in the latest version of
re2j, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 962388@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vincent Prat <vivi@debian.org> (supplier of updated re2j package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 07 Jun 2020 13:18:13 +0200
Source: re2j
Binary: libre2j-java
Architecture: source all
Version: 1.5+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Vincent Prat <vivi@debian.org>
Description:
 libre2j-java - RE2/J: linear time regular expression matching in Java
Closes: 962388
Changes:
 re2j (1.5+dfsg-1) unstable; urgency=medium
 .
   * Initial release (Closes: #962388)
Checksums-Sha1:
 3b7b83bf8594a8d12738c8a5859c23242409dbda 2013 re2j_1.5+dfsg-1.dsc
 95a2273bb4614ecdab0bc9e0d4b0a65381379c8a 916540 re2j_1.5+dfsg.orig.tar.xz
 c40b8fbc17299283ed1404703390bc95c59b3825 4988 re2j_1.5+dfsg-1.debian.tar.xz
 4ed6bdcdc427380ea516d4dbb23c51c1fe67bf33 116304 libre2j-java_1.5+dfsg-1_all.deb
 efb72dd9b35047eaeced60cbde4cd6b1fa55d2a2 11115 re2j_1.5+dfsg-1_amd64.buildinfo
Checksums-Sha256:
 6443dd5b2e816127d0da77e32ae97e47ea198a748189c02f7b61caf3da863369 2013 re2j_1.5+dfsg-1.dsc
 fdcc2d2512665f1ee9687661fd4a380f76c684cead3a97100c43ce7afaef4400 916540 re2j_1.5+dfsg.orig.tar.xz
 6c5e31c4691b19bc2fe9d97b6fdabb1f8d353b73b542ed2da3ed4be97038fd85 4988 re2j_1.5+dfsg-1.debian.tar.xz
 e0da7f0a2d68295c5026a22e724e2f9554720884d736794171a02f053499257b 116304 libre2j-java_1.5+dfsg-1_all.deb
 9ab0ebe2887d80cc91c718f8de641c951600fb32fe0c1ce47504dd2eca9834f8 11115 re2j_1.5+dfsg-1_amd64.buildinfo
Files:
 28703d148caac76813e55eece7f62c34 2013 libs optional re2j_1.5+dfsg-1.dsc
 b3178bbc928a48599156b28ac575d646 916540 libs optional re2j_1.5+dfsg.orig.tar.xz
 bfbda67894c346cedb8a68a438c06a22 4988 libs optional re2j_1.5+dfsg-1.debian.tar.xz
 46157e56d96aad7cfaf90792978f5893 116304 java optional libre2j-java_1.5+dfsg-1_all.deb
 f2b2e16cc1dc0564652a50fb3bc8dc6d 11115 libs optional re2j_1.5+dfsg-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=C0tk
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: