[gentoo-dev] Re: [gentoo-commits] gentoo-x86 commit in net-analyzer/wireshark: wireshark-1.6.2.ebuild ChangeLog wireshark-1.4.9.ebuild wireshark-1.4.7.ebuild wireshark-1.6.0_rc1.ebuild wireshark-1.4.4.ebuild wireshark-1.4.6-r1.ebuild

[gentoo-dev] Re: [gentoo-commits] gentoo-x86 commit in net-analyzer/wireshark: wireshark-1.6.2.ebuild ChangeLog wireshark-1.4.9.ebuild wireshark-1.4.7.ebuild wireshark-1.6.0_rc1.ebuild wireshark-1.4.4.ebuild wireshark-1.4.6-r1.ebuild

[Markos Chandras]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 12/09/2011 09:55 μμ, Peter Volkov (pva) wrote:
> pva         11/09/12 18:55:52
> 
> Modified:             ChangeLog Added:
> wireshark-1.6.2.ebuild wireshark-1.4.9.ebuild Removed:
> wireshark-1.4.7.ebuild wireshark-1.6.0_rc1.ebuild 
> wireshark-1.4.4.ebuild wireshark-1.4.6-r1.ebuild Log: Version bump.
> Fixes security bug #381551, thank GLSAMaker/CVETool Bot. Added
> 1.6.2, bug #370683. 1.6.2 also fixes bug 373545 wrt Francesco
> Lamonica. Drop old.
> 
> ... !!<net-analyzer/wireshark-1.6.0_rc1"

Why is wireshark blocking itself on DEPEND? is this a known bug that
prevents normal update from old to new version? It is a bit odd to
have to remove the existing installation in order to update to a new one

- -- 
Regards,
Markos Chandras / Gentoo Linux Developer / Key ID: B4AFF2C2
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)

iQIcBAEBCgAGBQJObxd4AAoJEPqDWhW0r/LC+KwP/jZqFJdVjpSbh7QQfyJWQBCY
WL9wVwVBDgb+onb3yh1VzGMae8rdkqphmdpf2sQU1L/rhsyO1XCx++UN1Hng0Y7X
j9RkNNMnKEue/aeBgqk5UOPUmuSOInzgdxcp5kio36MGM1DHIU1l4Usi+F9vwo5k
29XZzT3UT/kFuhXyOdHC0i5YCZMDfvCOea1bcG9P9zSk/jjXg3pRJLrZbu8vh6Pq
zApTT5P/O19X+ms1oOuzBdOouMRYL4ZJgnXTertbJeBsYrHQEW7ah3Koucsf7k7V
qdYMVPOqvdrICjQpLlqplzZDPzWn1L/S2Yqo+U3HAuuJFmX6fO9o0Ax752ptTkZj
JoGP9qs73jE/ef9NMEmAEquMFbE+bJFhXJtTLaM+7xyd0y9LA+IigvZlt7WlwXJm
IFSBdh3SziOGcZJzwuZlWvdB3pgx/U6292/d3J0l88nJWUw732OR2GW4w+VQnwL1
uoLUZTuFter2rY9OPJC6Rh7qWGCjMIf01JOzDCwimhoevjrFv+0QvxA+kY5cSIxh
xdB93v6a0+IrnIV4M31mKeOKxkxm8oazS/qZ9HVox7zQVdaLpBLEQJwJJn0C8z5R
+apunxwezD6nMahPZ5+iT49tmbtoT4GY5H4xRfJUWiFeZNhCXQV5ECLiC3AQ4h8c
F1XxV5mvoZSDygbpR51+
=ZtnX
-----END PGP SIGNATURE-----

[gentoo-dev] Re: [gentoo-commits] gentoo-x86 commit in net-analyzer/wireshark: wireshark-1.6.2.ebuild ChangeLog wireshark-1.4.9.ebuild wireshark-1.4.7.ebuild wireshark-1.6.0_rc1.ebuild wireshark-1.4.4.ebuild wireshark-1.4.6-r1.ebuild

[Diego Elio Pettenò]

[-- Attachment #1: Type: text/plain, Size: 537 bytes --]

Il giorno mar, 13/09/2011 alle 11.42 +0300, Markos Chandras ha scritto:
> 
> Why is wireshark blocking itself on DEPEND? is this a known bug that
> prevents normal update from old to new version? It is a bit odd to
> have to remove the existing installation in order to update to a new
> one 

AFAICT it might be related to the fact that wireshark tends to link to
its own installed libraries when being rebuilt. Yes that means that its
build system is tfu.

-- 
Diego Elio Pettenò — Flameeyes
http://blog.flameeyes.eu/

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 490 bytes --]

Re: [gentoo-dev] Re: [gentoo-commits] gentoo-x86 commit in net-analyzer/wireshark: wireshark-1.6.2.ebuild ChangeLog wireshark-1.4.9.ebuild wireshark-1.4.7.ebuild wireshark-1.6.0_rc1.ebuild wireshark-1.4.4.ebuild wireshark-1.4.6-r1.ebuild

[Ciaran McCreesh]

[-- Attachment #1: Type: text/plain, Size: 1010 bytes --]

On Tue, 13 Sep 2011 11:23:18 +0200
Diego Elio Pettenò <flameeyes@gentoo.org> wrote:
> Il giorno mar, 13/09/2011 alle 11.42 +0300, Markos Chandras ha
> scritto:
> > Why is wireshark blocking itself on DEPEND? is this a known bug that
> > prevents normal update from old to new version? It is a bit odd to
> > have to remove the existing installation in order to update to a new
> > one 
> 
> AFAICT it might be related to the fact that wireshark tends to link to
> its own installed libraries when being rebuilt. Yes that means that
> its build system is tfu.

In that case blocking just old versions is wrong, since if your
installed version is broken and you try to reinstall, you'll need to
uninstall first too.

(Incidentally, there's a bug in libtool that causes it to randomly link
to stuff on / if you try to create an executable that links to both a
built library and an installed library. It's probably fairly common,
but people won't necessarily notice.)

-- 
Ciaran McCreesh

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

[gentoo-dev] Re: Re: [gentoo-commits] gentoo-x86 commit in net-analyzer/wireshark: wireshark-1.6.2.ebuild ChangeLog wireshark-1.4.9.ebuild wireshark-1.4.7.ebuild wireshark-1.6.0_rc1.ebuild wireshark-1.4.4.ebuild wireshark-1.4.6-r1.ebuild

[Diego Elio Pettenò]

[-- Attachment #1: Type: text/plain, Size: 1078 bytes --]

Il giorno mar, 13/09/2011 alle 10.28 +0100, Ciaran McCreesh ha scritto:
> In that case blocking just old versions is wrong, since if your
> installed version is broken and you try to reinstall, you'll need to
> uninstall first too.

It doesn't matter as much when it's the same version because then it
would have the same soversion and thus it wouldn't cause _visible_
trouble.

It might be interesting to note that it seems like rc4->final also
causes the same problem.

> (Incidentally, there's a bug in libtool that causes it to randomly link
> to stuff on / if you try to create an executable that links to both a
> built library and an installed library. It's probably fairly common,
> but people won't necessarily notice.)

Just for completeness sake, this can usually be fixed/worked around by
making sure to list just-built .la files _before_ the /usr libraries. I
had to work that around on opensc before. PAM also suffers from the same
issue _if_ the .la files are kept around.

-- 
Diego Elio Pettenò — Flameeyes
http://blog.flameeyes.eu/

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 490 bytes --]

Re: [gentoo-dev] Re: Re: [gentoo-commits] gentoo-x86 commit in net-analyzer/wireshark: wireshark-1.6.2.ebuild ChangeLog wireshark-1.4.9.ebuild wireshark-1.4.7.ebuild wireshark-1.6.0_rc1.ebuild wireshark-1.4.4.ebuild wireshark-1.4.6-r1.ebuild

[Ciaran McCreesh]

[-- Attachment #1: Type: text/plain, Size: 601 bytes --]

On Tue, 13 Sep 2011 11:53:28 +0200
Diego Elio Pettenò <flameeyes@gentoo.org> wrote:
> Il giorno mar, 13/09/2011 alle 10.28 +0100, Ciaran McCreesh ha
> scritto:
> > In that case blocking just old versions is wrong, since if your
> > installed version is broken and you try to reinstall, you'll need to
> > uninstall first too.
> 
> It doesn't matter as much when it's the same version because then it
> would have the same soversion and thus it wouldn't cause _visible_
> trouble.

It would if the version on / is broken and you're reinstalling to try
to fix it.

-- 
Ciaran McCreesh

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

Re: [gentoo-dev] Re: Re: [gentoo-commits] gentoo-x86 commit in net-analyzer/wireshark: wireshark-1.6.2.ebuild ChangeLog wireshark-1.4.9.ebuild wireshark-1.4.7.ebuild wireshark-1.6.0_rc1.ebuild wireshark-1.4.4.ebuild wireshark-1.4.6-r1.ebuild

[Mike Frysinger]

[-- Attachment #1: Type: Text/Plain, Size: 708 bytes --]

On Tuesday, September 13, 2011 06:24:51 Ciaran McCreesh wrote:
> On Tue, 13 Sep 2011 11:53:28 +0200 Diego Elio Pettenò wrote:
> > Il giorno mar, 13/09/2011 alle 10.28 +0100, Ciaran McCreesh ha scritto:
> > > In that case blocking just old versions is wrong, since if your
> > > installed version is broken and you try to reinstall, you'll need to
> > > uninstall first too.
> > 
> > It doesn't matter as much when it's the same version because then it
> > would have the same soversion and thus it wouldn't cause _visible_
> > trouble.
> 
> It would if the version on / is broken and you're reinstalling to try
> to fix it.

a largely irrelevant edge case that cases little to no harm
-mike

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 836 bytes --]

Re: [gentoo-dev] Re: Re: [gentoo-commits] gentoo-x86 commit in net-analyzer/wireshark: wireshark-1.6.2.ebuild ChangeLog wireshark-1.4.9.ebuild wireshark-1.4.7.ebuild wireshark-1.6.0_rc1.ebuild wireshark-1.4.4.ebuild wireshark-1.4.6-r1.ebuild

[Ciaran McCreesh]

[-- Attachment #1: Type: text/plain, Size: 425 bytes --]

On Tue, 13 Sep 2011 09:58:58 -0400
Mike Frysinger <vapier@gentoo.org> wrote:
> > It would if the version on / is broken and you're reinstalling to
> > try to fix it.
> 
> a largely irrelevant edge case that cases little to no harm

But getting it right is easier than getting it wrong: just DEPEND block
the entire package, not a version range. There's no excuse not to do it
properly here.

-- 
Ciaran McCreesh

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

Re: [gentoo-dev] Re: Re: [gentoo-commits] gentoo-x86 commit in net-analyzer/wireshark: wireshark-1.6.2.ebuild ChangeLog wireshark-1.4.9.ebuild wireshark-1.4.7.ebuild wireshark-1.6.0_rc1.ebuild wireshark-1.4.4.ebuild wireshark-1.4.6-r1.ebuild

[Mike Frysinger]

[-- Attachment #1: Type: Text/Plain, Size: 811 bytes --]

On Tuesday, September 13, 2011 05:53:28 Diego Elio Pettenò wrote:
> Il giorno mar, 13/09/2011 alle 10.28 +0100, Ciaran McCreesh ha scritto:
> > (Incidentally, there's a bug in libtool that causes it to randomly link
> > to stuff on / if you try to create an executable that links to both a
> > built library and an installed library. It's probably fairly common,
> > but people won't necessarily notice.)
> 
> Just for completeness sake, this can usually be fixed/worked around by
> making sure to list just-built .la files _before_ the /usr libraries. I
> had to work that around on opensc before. PAM also suffers from the same
> issue _if_ the .la files are kept around.

that's part of the issue.  the fix-relink patch that we carry in ELT-patches 
for ~8 years now is the other part.
-mike

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 836 bytes --]

Re: [gentoo-dev] Re: Re: [gentoo-commits] gentoo-x86 commit in net-analyzer/wireshark: wireshark-1.6.2.ebuild ChangeLog wireshark-1.4.9.ebuild wireshark-1.4.7.ebuild wireshark-1.6.0_rc1.ebuild wireshark-1.4.4.ebuild wireshark-1.4.6-r1.ebuild

[Peter Volkov]

В Втр, 13/09/2011 в 11:53 +0200, Diego Elio Pettenò пишет:
> Il giorno mar, 13/09/2011 alle 10.28 +0100, Ciaran McCreesh ha scritto:
> > In that case blocking just old versions is wrong, since if your
> > installed version is broken and you try to reinstall, you'll need to
> > uninstall first too.

wireshark relinks against system wsutil library during 'make DESTDIR=
${D} install', so once wireshark-1.6 is installed we have
libwsutil.so.1.0.0. There is nothing bad linking with correct library
version (even though binary came from previous version).

> It doesn't matter as much when it's the same version because then it
> would have the same soversion and thus it wouldn't cause _visible_
> trouble.
> 
> It might be interesting to note that it seems like rc4->final also
> causes the same problem.

Well, I can just drop _rc part in blocker. _rc versions were hardmasked
anyway.

> Just for completeness sake, this can usually be fixed/worked around by
> making sure to list just-built .la files _before_ the /usr libraries. I
> had to work that around on opensc before. PAM also suffers from the same
> issue _if_ the .la files are kept around.

Hm interesting. Actually I've tried to strace libtool and it have not
touched system .la files but since we drop .la anyway I'll recheck.

--
Peter.

Re: [gentoo-dev] Re: [gentoo-commits] gentoo-x86 commit in net-analyzer/wireshark: wireshark-1.6.2.ebuild ChangeLog wireshark-1.4.9.ebuild wireshark-1.4.7.ebuild wireshark-1.6.0_rc1.ebuild wireshark-1.4.4.ebuild wireshark-1.4.6-r1.ebuild

[Tomáš Chvátal]

2011/9/13 Markos Chandras <hwoarang@gentoo.org>:
> On 12/09/2011 09:55 μμ, Peter Volkov (pva) wrote:
>> pva         11/09/12 18:55:52
>>
>> Modified:             ChangeLog Added:
>> wireshark-1.6.2.ebuild wireshark-1.4.9.ebuild Removed:
>> wireshark-1.4.7.ebuild wireshark-1.6.0_rc1.ebuild
>> wireshark-1.4.4.ebuild wireshark-1.4.6-r1.ebuild Log: Version bump.
>> Fixes security bug #381551, thank GLSAMaker/CVETool Bot. Added
>> 1.6.2, bug #370683. 1.6.2 also fixes bug 373545 wrt Francesco
>> Lamonica. Drop old.
>>
>> ... !!<net-analyzer/wireshark-1.6.0_rc1"
>
> Why is wireshark blocking itself on DEPEND? is this a known bug that
> prevents normal update from old to new version? It is a bit odd to
> have to remove the existing installation in order to update to a new one
>
> - --
> Regards,
> Markos Chandras / Gentoo Linux Developer / Key ID: B4AFF2C2
Actually this s**t happens a lot,
due to broken build system the package links to the already in-system
packages and use headers from system.

So one has to block the major versions to avoid the breakages during the build

Cheers

Tom