Bug#789256: cmus: Pulls in unwanted and potentially dangerous DECnet packages through libroar2

Stephan Jauernick info at stephan-jauernick.de
Sat Jun 20 21:00:32 UTC 2015


Hi Adrian,

On Sat, Jun 20, 2015 at 10:16:28PM +0200, John Paul Adrian Glaubitz wrote:
> On 06/20/2015 09:52 PM, Stephan Jauernick wrote:
> > Please do for the reasons mentioned below. Also these are
> > considered standard of a good bug report.
> 
> No, the problem is apparent and I don't really want to debug libdnet.
> 
> You are still trying to boil this down to the mere problem with cmus,
> but that's just a side effect. The real point is that roaraudio depends
> on an unmaintained piece of core software which Debian would like
> to get rid of. It doesn't really matter if you're able to fix this
> bug now as this won't change anything about the unmaintained status
> of dnet-progs.
> 
> So, please refrain from continuing the focus on this particular problem
> with cmus, this is not the main issue, it's just the trigger that
> brought me to the attention of this problem. I won't be bothered to
> continue the discussion anymore if your only concern is this particular
> problem with cmus but just eventually hand over the issue to the TC.
> 

I am only a user who wants to help. While it is not even clear if it is
in dnet you seem to be quite obsessed with it. So far from your previous
mails i can only do a wild guess that it is somewhere in the cmus roar
plugin/roaraudio complex. 

I never used decnet myself and probably won't. Also I myself don't
particularily care about decnet. Additionally I am not the maintainer of either
project but just someone who wants to help. 

If you point out a valid bug in decnet... I think nobody will object to
dropping it.

Also you are free to ask Patrick to drop the libdnet from roaraudio.

I am trying to find out where the bug is located so we finally can
contact the right upstream and work on a fix.

> > I only get the decnet warning and then cmus starts up with about 5 
> > seconds delay on the first start and from then on instantly.
> 
> Which is _exactly_ the problem. It just appears that for some network
> configurations it seems to get stuck forever. It seems that it affects
> static network configurations. But again, it's not just this issue
> but the fact that dnet-prog is unmaintained, both upstream and in
> Debian and normally packages in such state - where it's apparent
> that no one is going to pick it up anywhere soon - are to be removed
> from Debian.
> 

Then please make a bugreport against dnprogs, asking for it to be dropped
from debian. 

We only know(as stated above i only can guess that much) that this bug occours on some configurations(which are
currently unamed; for me it works on a virtualbox/with dhcp) and
somewhere in the roaraudio/cmus plugin. It is not even clear if it is inside of libdnet.

You could recompile roaraudio and the cmus roar without dnet and check
if you still get the same behaviour.

I would be happy to provide the debugging myself but i can't reproduce
the bug.

You could start giving us a meaningfull starting point for debugging the issue remotely.

Ofcourse you can progress with trying to get Patrick or the TC to drop
the dnet dependency. This might or might not solve the actual problem.

In the event it does: Good job. You fixed a bug without propper
debugging.

In the event it doesn't: Good job. We can now finally start with
bughunting!

> I mean, are you going to adopt the DECnet-related packages?

No. I am not going to do this. Reasons are stated above.


> 
> Adrian
> 
> -- 
>  .''`.  John Paul Adrian Glaubitz
> : :' :  Debian Developer - glaubitz at debian.org
> `. `'   Freie Universitaet Berlin - glaubitz at physik.fu-berlin.de
>   `-    GPG: 62FF 8A75 84E0 2956 9546  0006 7426 3B37 F5B5 F913

Kind Regards,
Stephan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-multimedia-maintainers/attachments/20150620/58b086e4/attachment-0001.sig>


More information about the pkg-multimedia-maintainers mailing list