Bug#835475: /usr/bin/dscverify: dscverify: please use libdpkg-perl for .dsc parsing and verification

Johannes Schauer josch at debian.org
Fri Aug 26 07:35:20 UTC 2016


Package: devscripts
Version: 2.16.7
Severity: wishlist
File: /usr/bin/dscverify

Hi,

dscverify currently uses multiple regexes to parse a .dsc. Instead
libdpkg-perl could be used. The advantages would be:

 - shorter code of dscverify
 - always using the latest hash sum algorithms
 - less surface for bugs to appear
 - automatic support for other signed deb822 formats with file lists

If you would appreciate a conversion of the current dscverify code to
libdpkg-perl, then please shout. I have experience with using the dpkg's
perl api from using it for sbuild and I can easily provide a patch if
that would be appreciated by the devscript maintainers.

Thanks!

cheers, josch



More information about the devscripts-devel mailing list