Bug#646600: jarjar misbuilding bug is serious

Daniel Schepler dschepler at gmail.com
Fri Dec 16 03:50:19 UTC 2011


severity 646600 serious
thanks

This bug is serious: if you rebuild jarjar in current sid, and then try to use 
that rebuilt package, the results are broken.  For example, I ran into this 
with my Debian rebuild with cglib failing to build from source.  It took me a 
while to find this bug report and find out that it was the cause.

I actually wonder: is it a good idea in the first place to keep this misfeature 
(asm classes copied into the jar under a different Java package name) in the 
Debian packages?  It seems to me this is a Java equivalent of including 
private copies of external libraries in a source package, which is frowned 
upon in Debian packages.  Maybe the Debian version should be patched to use 
the system asm libraries instead of bundling in a copy of whatever system asm 
library happens to be available at build time.
-- 
Daniel Schepler





More information about the pkg-java-maintainers mailing list