From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: bug#27429: core-updates and shishi [was Re: bug#27429: Stack clash (CVE-2017-1000366 etc)] Date: Fri, 30 Jun 2017 02:47:14 -0400 Message-ID: <20170630064714.GA13156@jasmine.lan> References: <20170621084134.GA2870@macbook42.flashner.co.il> <20170621095045.GB2870@macbook42.flashner.co.il> <20170621235227.GA4510@jasmine.lan> <20170622000336.GB4510@jasmine.lan> <87zid0iksk.fsf@netris.org> <87mv8rqcuu.fsf@gnu.org> <87h8yyn696.fsf@netris.org> <87wp7ulftb.fsf@gnu.org> <20170629210317.GB19238@jasmine.lan> <8760fesa36.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="SLDf9lqlvOQaIe6s" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:58343) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dQpin-0003MV-6C for bug-guix@gnu.org; Fri, 30 Jun 2017 02:48:06 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dQpik-0006Hk-4g for bug-guix@gnu.org; Fri, 30 Jun 2017 02:48:05 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:42708) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dQpik-0006HZ-1I for bug-guix@gnu.org; Fri, 30 Jun 2017 02:48:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: Content-Disposition: inline In-Reply-To: <8760fesa36.fsf@gnu.org> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 27429@debbugs.gnu.org --SLDf9lqlvOQaIe6s Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Jun 30, 2017 at 12:27:57AM +0200, Ludovic Court=E8s wrote: > > - (native-inputs `(("pkg-config" ,pkg-config))) > > + (arguments > > + `(#:phases > > + (modify-phases %standard-phases > > + (add-before 'configure 'bootstrap > > + (lambda _ (zero? (system* "autoreconf" "-vfi"))))))) > > + (native-inputs `(("pkg-config" ,pkg-config) > > + ;; XXX For bootstrapping. Remove for the next Shi= shi > > + ;; release after 1.0.2. > > + ("autoconf" ,autoconf) > > + ("automake" ,automake) > > + ("gettext" ,gnu-gettext) > > + ("libtool" ,libtool) > > + ("texinfo" ,texinfo))) >=20 > I think you can achieve the same result but without adding these > dependencies etc. just by adding: >=20 > #:configure-flags '("ac_cv_libgcrypt=3Dyes") >=20 > which I think is marginally better (but no big deal). Yes, that's better. I built Shishi and GSS with it locally, pushed, and started a core-updates evaluation. But I don't know if we will hit this evaluation failure also on core-updates since I merged master: https://lists.gnu.org/archive/html/guix-devel/2017-06/msg00349.html --SLDf9lqlvOQaIe6s Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAllV8/IACgkQJkb6MLrK fwiD5A//W3Dvjc2ospN+Nk9KcPle/2dX6q0AkuSoLjMgqnR1Ii4NMKffJtI1Cgyz 9xDGayrf77AYKi3bev671gQ5XDq5syEjFrBkIbRdnZBuhwb2bHTituDS9NBSBm1E XZn/RHTOhKi1+cHZJHlLiAg1bv31ReoaxbWz+3EDqAkFwoJrkbkID6XC4mm9JIOO j7BWYtPaChPwewICOh96FSn5NFFbefpt3UTGecSjiB6vof1DApvX/XoFxCUwpdY0 4/SDTJRXuiFE4BPOpUpl9Geibjqxe4ZkWCSQDUzPzR12DW/14nrf5Yw5WV66KlCc iOIjluk2mbUUo87LHZHsOigDh1o/OinVyDkUM8v+w/Xoyh3mGqCn9MDtuSoigOr8 w23TkagnHyu3tXz9xrm+F06Oz7g+me4xphENRmkyFOSoGm1SOE0dxH6SWKUgS2he jSyziOGyOs844xB09qRTkok6EH5n0rX/QBnZuTIUlUJ8Wk3ihdNqVYLSPwoUNv7r Xh1/JZp8TdQ+lR+3vQLi0T8wjY36kUTZydKhzDgVAGHzGfln5hg5BzYF7YaNXqbj b6UDptywWXstlb4seM/h3M3+S8MxK0Cc0yIwH0PRu/th7PoxQZETjYP9mxDfZQLM bgOPOHc3w26C/Slv3WSRbA9aTYcAPXVf8HeqFiL/v1EXKL+Q/l4= =oszP -----END PGP SIGNATURE----- --SLDf9lqlvOQaIe6s--