[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#953660: marked as done (RFP: golang-github-valyala-fastjson -- fast JSON parser and validator for Go (library))

Your message dated Sun, 20 Dec 2020 22:00:10 +0000
with message-id <E1kr6kM-000Djt-4N@fasolo.debian.org>
and subject line Bug#953660: fixed in golang-github-valyala-fastjson 1.6.3-1
has caused the Debian Bug report #953660,
regarding RFP: golang-github-valyala-fastjson -- fast JSON parser and validator for Go (library)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
953660: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953660
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: wnpp
Severity: wishlist
Tags: patch

* Package name    : golang-github-valyala-fastjson
  Version         : 1.5.0
  Upstream Author : Aliaksandr Valialkin
* URL             : https://github.com/valyala/fastjson
* License         : Expat
  Programming Lang: Go
  Description     : fast JSON parser and validator for Go (library)

 No custom structs, no code generation, no reflection.
 .
 Features:
  * Fast. As usual, up to 15x faster than the standard encoding/json.
  * Parses arbitrary JSON without schema, reflection, struct magic and code
    generation contrary to easyjson.
  * Provides a simple API.
  * Outperforms jsonparser and gjson when accessing multiple unrelated fields,
    since fastjson parses the input JSON only once.
  * Validates the parsed JSON unlike jsonparser and gjson.
  * May quickly extract a part of the original JSON with
    Value.Get(...).MarshalTo and modify it with Del and Set functions.
  * May parse array containing values with distinct types (aka non-homogenous
    types). For instance, fastjson easily parses the following JSON array
    [123, "foo", [456], {"k": "v"}, null].
  * fastjson preserves the original order of object items when calling
    Object.Visit.
 .
 Known limitations:
  * Requies extra care to work with - references to certain objects
    recursively returned by Parser must be released before the next call to
    Parse.  Otherwise the program may work improperly. The same applies to
    objects returned by Arena.
  * Cannot parse JSON from io.Reader.
 .
 Security:
  * fastjson shouldn't crash or panic when parsing input strings specially
    crafted by an attacker. It must return error on invalid input JSON.
  * fastjson requires up to sizeof(Value) * len(inputJSON) bytes of memory
    for parsing inputJSON string. Limit the maximum size of the inputJSON
    before parsing it in order to limit the maximum memory usage.


This is a required dependency for victoria-metrics.

Attached a tested and working packaging, where only the Uploaders, and
ITP bug need to be filled, and the packaging imported into git.

Thanks,
Guillem

Attachment: golang-github-valyala-fastjson_1.5.0-1.debian.tar.xz
Description: application/xz


--- End Message ---
--- Begin Message --- 
Source: golang-github-valyala-fastjson
Source-Version: 1.6.3-1
Done: Guillem Jover <gjover@sipwise.com>

We believe that the bug you reported is fixed in the latest version of
golang-github-valyala-fastjson, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 953660@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Guillem Jover <gjover@sipwise.com> (supplier of updated golang-github-valyala-fastjson package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 12 Dec 2020 01:11:01 +0100
Source: golang-github-valyala-fastjson
Binary: golang-github-valyala-fastjson-dev
Architecture: source all
Version: 1.6.3-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Guillem Jover <gjover@sipwise.com>
Description:
 golang-github-valyala-fastjson-dev - fast JSON parser and validator for Go (library)
Closes: 953660
Changes:
 golang-github-valyala-fastjson (1.6.3-1) unstable; urgency=medium
 .
   * Initial release (Closes: #953660)
Checksums-Sha1:
 d1d0f42130cfdc2eea2ac5360cf5f7de5a1a59db 2263 golang-github-valyala-fastjson_1.6.3-1.dsc
 136f213abf1fae4f39f63ad01bee921cbb48ec89 731249 golang-github-valyala-fastjson_1.6.3.orig.tar.gz
 ba7c209b4660963c65dbdf22bda7d5b7a1429d43 3228 golang-github-valyala-fastjson_1.6.3-1.debian.tar.xz
 2be0b9750d2f23b2d599befa6d3eca85ccac1b44 453512 golang-github-valyala-fastjson-dev_1.6.3-1_all.deb
 2ee4a6fba94ef1456851e0124aa09a22450ce46b 5974 golang-github-valyala-fastjson_1.6.3-1_amd64.buildinfo
Checksums-Sha256:
 2ba8d92d72c7baaf122aac8768e54d4cd1e9c1440e046e281ecc9755bbdd4619 2263 golang-github-valyala-fastjson_1.6.3-1.dsc
 1e1205eb75af6acee6d8ce741d3c0ff8f03ee4ce3b92375a9fd493ea2bdef350 731249 golang-github-valyala-fastjson_1.6.3.orig.tar.gz
 6a819d4777661f508e1e847c41a989c3c2d61a88009dae8ac6b453ffa73bfccd 3228 golang-github-valyala-fastjson_1.6.3-1.debian.tar.xz
 42d3fe2ee6a7324f494da6a85366486e46d247cb73b7a4428d6e7bb5e34fe013 453512 golang-github-valyala-fastjson-dev_1.6.3-1_all.deb
 614c65a99907fa172fb3f6dcb49add778ce4dafb7fd924acf251ea3b29d2e3ae 5974 golang-github-valyala-fastjson_1.6.3-1_amd64.buildinfo
Files:
 695d31d346cc2c742c40b1dca23182e7 2263 golang optional golang-github-valyala-fastjson_1.6.3-1.dsc
 02498045f138f30739bdb43e2d9f39ce 731249 golang optional golang-github-valyala-fastjson_1.6.3.orig.tar.gz
 76d68404a02fd9553baa49c3f5de088a 3228 golang optional golang-github-valyala-fastjson_1.6.3-1.debian.tar.xz
 94ad063b117ac55de6b12206cdc80354 453512 golang optional golang-github-valyala-fastjson-dev_1.6.3-1_all.deb
 caf7f98d753568abf1bc76b12878cfb5 5974 golang optional golang-github-valyala-fastjson_1.6.3-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=OXbq
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: