Secure testing team - Oct 2007 - Bug#444518: ardour: FTBFS: […]. / Ardour contains embedded code copies.

Lucas Nussbaum <lucas at lucas-nussbaum.net>
(29/09/2007):
> Package: ardour
> version: 1:2.0.5-1
> Severity: serious
> User: debian-qa at lists.debian.org
> Usertags: qa-ftbfs-20070928 qa-ftbfs
> Justification: FTBFS on i386
> Relevant part:
> g++ -o libs/gtkmm2/gtk/gtkmm/toolbar.os -c -g -DARCH_X86 -Wall -DHAVE_LIBLO
-DENABLE_NLS -Woverloaded-virtual -fPIC -I/usr/include/atk-1.0 -Ilibs/sigc++2
-I/usr/include/glib-2.0 -I/usr/include/gtk-2.0 -I/usr/include/cairo
-I/usr/include/pango-1.0 -Ilibs/gtkmm2/atk -I/usr/include/freetype2
-Ilibs/glibmm2 -I/usr/lib/glib-2.0/include -Ilibs/gtkmm2/pango -Ilibs/gtkmm2/gtk
-I/usr/lib/gtk-2.0/include -I/usr/include/libpng12 -Ilibs/gtkmm2/gdk
libs/gtkmm2/gtk/gtkmm/toolbar.cc
> libs/gtkmm2/gtk/gtkmm/toolbar.cc: In member function
''Gtk::Tooltips* Gtk::Toolbar::get_tooltips_object() const'':
> libs/gtkmm2/gtk/gtkmm/toolbar.cc:522: error: ''const struct
_GtkToolbar'' has no member named ''tooltips''
> scons: *** [libs/gtkmm2/gtk/gtkmm/toolbar.os] Error 1
> scons: building terminated because of errors.
> make: *** [debian/stamp-scons-build] Error 2
Hi.

That made me discover the following:

| kibi at kitty2:~/bsp2/ardour-2.1$ ls libs/
| appleutility  ardour  clearlooks  fst  glibmm2  gtkmm2  gtkmm2ext
libgnomecanvasmm  libsndfile  midi++2  pbd  sigc++2  soundtouch surfaces

Cc''ing the appropriate list according to [1] (although I
didn''t check
which parts were actually built). Also, it seems e.g. libsndfile got
CVE(s) this month.

 1. http://wiki.debian.org/EmbeddedCodeCopies

Cheers,

-- 
Cyril Brulebois
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :
http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20071008/ac2b5988/attachment.pgp

Hi,
* Cyril Brulebois <cyril.brulebois at enst-bretagne.fr> [2007-10-08
23:28]:
> Lucas Nussbaum <lucas at lucas-nussbaum.net> (29/09/2007):
[...] 
> That made me discover the following:
> 
> | kibi at kitty2:~/bsp2/ardour-2.1$ ls libs/
> | appleutility  ardour  clearlooks  fst  glibmm2  gtkmm2  gtkmm2ext
libgnomecanvasmm  libsndfile  midi++2  pbd  sigc++2  soundtouch surfaces
> 
> Cc''ing the appropriate list according to [1] (although I
didn''t check
> which parts were actually built).
I added those with looking at the build logs to the list of 
our known code copies. Thanks very much for reporting this.
Someone please check back if I missed anything with the ones 
I addded.

Kind regards
Nico

-- 
Nico Golde - http://ngolde.de - nion at jabber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :
http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20071009/613a2171/attachment.pgp