Bug#863101: Uscan uses all available memory of the system when run against guitarix

[Víctor Cuadrado Juan]

Package: devscripts
Version: 2.17.5
Severity: critical

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

When run against guitarix package git repo, at commit 7ff29bd,
for obtaining `guitarix2-0.35.3.tar.xz` that would become the
`guitarix_0.35.3.orig.tar.xz` symlink, `uscan --verbose` uses
all available ram of the system and if lucky it outputs
"Out of memory!".

I'm tagging it as critical because I have had my computer hard
freeze 2 times after executing uscan, needing a power cycle.

I have no configuration enabled for uscan in ~/.devscripts.

Regards,

- --
Víctor Cuadrado Juan           me at viccuad.me

PGP key ID: 4096R: 0xA2591E231E251F36
Key fingerprint: E3C5 114C 0C5B 4C49 BA03  0991 A259 1E23 1E25 1F36
My signed E-Mails are trustworthy.


- -- Package-specific info:

- --- /etc/devscripts.conf ---

- --- ~/.devscripts ---
BTS_INTERACTIVE= yes
DEBCHANGE_MULTIMAINT_MERGE=yes
DEBSIGN_KEYID=0xA2591E231E251F36
DEBUILD_DPKG_BUILDPACKAGE_OPTS="-us -uc -I -i"
DEBUILD_LINTIAN_OPTS="-i -I"

- -- System Information:
Debian Release: 9.0
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing'), (1, 'experimental')
Architecture: amd64
 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages devscripts depends on:
ii  dpkg-dev     1.18.23
ii  libc6        2.24-10
ii  perl         5.24.1-2
pn  python3:any  <none>

Versions of packages devscripts recommends:
ii  apt                         1.4.1
ii  at                          3.1.20-3
ii  curl                        7.52.1-5
ii  dctrl-tools                 2.24-2+b1
ii  debian-keyring              2017.01.20
ii  dput-ng [dput]              1.12
ii  dupload                     2.7.0
ii  equivs                      2.0.9+nmu1
ii  fakeroot                    1.21-3.1
ii  file                        1:5.30-1
ii  gnupg                       2.1.18-6
ii  gnupg2                      2.1.18-6
ii  libdistro-info-perl         0.14
ii  libdpkg-perl                1.18.23
ii  libencode-locale-perl       1.05-1
ii  libgit-wrapper-perl         0.047-1
ii  liblist-compare-perl        0.53-1
ii  liblwp-protocol-https-perl  6.06-2
ii  libsoap-lite-perl           1.20-1
ii  liburi-perl                 1.71-1
ii  libwww-perl                 6.15-1
ii  licensecheck                3.0.29-1
ii  lintian                     2.5.50.3
ii  man-db                      2.7.6.1-2
ii  patch                       2.7.5-1+b2
ii  patchutils                  0.3.4-2
ii  python3-debian              0.1.30
ii  python3-magic               1:5.30-1
ii  sensible-utils              0.0.9
ii  strace                      4.15-2
ii  unzip                       6.0-21
ii  wdiff                       1.2.2-2
ii  wget                        1.18-5
ii  xz-utils                    5.2.2-1.2+b1

Versions of packages devscripts suggests:
pn  adequate                     <none>
ii  autopkgtest                  4.4
ii  bls-standalone               0.20151231
ii  bsd-mailx [mailx]            8.1.2-0.20160123cvs-4
ii  build-essential              12.3
ii  check-all-the-things         2017.01.15.1
pn  cvs-buildpackage             <none>
ii  devscripts-el                36.3+nmu1
ii  diffoscope                   78
pn  disorderfs                   <none>
ii  dose-extra                   5.0.1-8
ii  duck                         0.12
pn  faketime                     <none>
ii  gnuplot                      5.0.5+dfsg1-6
ii  gpgv                         2.1.18-6
ii  how-can-i-help               15
ii  libauthen-sasl-perl          2.1600-1
ii  libfile-desktopentry-perl    0.22-1
pn  libnet-smtps-perl            <none>
ii  libterm-size-perl            0.207-1+b4
ii  libtimedate-perl             2.3000-2
pn  libyaml-syck-perl            <none>
pn  mozilla-devscripts           <none>
ii  mutt                         1.7.2-1
ii  openssh-client [ssh-client]  1:7.4p1-10
pn  piuparts                     <none>
pn  ratt                         <none>
pn  reprotest                    <none>
pn  svn-buildpackage             <none>
ii  w3m                          0.5.3-34

- -- no debconf information

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEELLKv6mdE0z94m2FAIj8VylqvDngFAlkh5SQACgkQIj8Vylqv
Dnj+SQgAm0una6LSAdQiJ33oxUseyd59jfiivgFRo5yFb6WEqD2TWbqr0k8hsyTu
BnzAekzDpvImPAzEiuZbaETUXzdgpi21s1Xu/YfEahjLUKc/zHK7cqxXaHE9Lk5p
92pU46FOnRdF53w9O1za4xNQSx9ynR2pgaq5V7OE369PuwEamm3OvGIlSjYjktvN
Vdek40WZJXywpxYUKbSwn22tSgyJXcbk4kYRqvs7giX+NIvH/+V6Yo4HpMSge/6j
DVib2/oQmsNkOjEu5wuAfy2KTBnR7Ff41s6thSkyBPdLjP9zwKl08T/VoVBYlRUg
t0vQu/KOSXhaJkPym4GcKl6mpTW3jA==
=Qpp3
-----END PGP SIGNATURE-----