Debian Bug report logs - #913696
debdelta: Script accesses internal dpkg database

version graph

Package: src:debdelta; Maintainer for src:debdelta is A Mennucc1 <[email protected]>;

Reported by: Guillem Jover <[email protected]>

Date: Wed, 14 Nov 2018 03:18:02 UTC

Severity: important

Found in version debdelta/0.62

Full log

🔗 View this message in rfc822 format

X-Loop: [email protected]
Subject: Bug#913696: debdelta: Script accesses internal dpkg database
Reply-To: A Mennucc1 <[email protected]>, [email protected]
Resent-From: A Mennucc1 <[email protected]>
Resent-To: [email protected]
Resent-CC: A Mennucc1 <[email protected]>
X-Loop: [email protected]
Resent-Date: Sat, 02 Feb 2019 10:09:02 +0000
Resent-Message-ID: <[email protected]>
Resent-Sender: [email protected]
X-Debian-PR-Message: followup 913696
X-Debian-PR-Package: src:debdelta
X-Debian-PR-Keywords: 
References: <[email protected]> <[email protected]>
X-Debian-PR-Source: debdelta
Received: via spool by [email protected] id=B913696.154910201732752
          (code B ref 913696); Sat, 02 Feb 2019 10:09:02 +0000
Received: (at 913696) by bugs.debian.org; 2 Feb 2019 10:06:57 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.2-bugs.debian.org_2005_01_02
	(2018-09-13) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-11.3 required=4.0 tests=BAYES_00,FSL_HELO_NON_FQDN_1,
	HAS_BUG_NUMBER,MURPHY_DRUGS_REL8,PGPSIGNATURE,RDNS_NONE,TXREP
	autolearn=ham autolearn_force=no
	version=3.4.2-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 39; hammy, 150; neutral, 78; spammy,
	0. spammytokens: hammytokens:0.000-+--HOpenpgp:preference,
	0.000-+--HOpenpgp:signencrypt, 0.000-+--H*u:60.0,
	0.000-+--H*ct:protocol, 0.000-+--H*ct:application
Received: from [2001:b07:2e7:1bfd:42:4ff:fe82:3741] (helo=bilbo)
	by buxtehude.debian.org with esmtp (Exim 4.89)
	(envelope-from <[email protected]>)
	id 1gpsCP-0008W4-36
	for [email protected]; Sat, 02 Feb 2019 10:06:57 +0000
Received: from [192.168.1.132] (unknown [192.168.1.254])
	by bilbo (Postfix) with ESMTPSA id D8A836F60;
	Sat,  2 Feb 2019 10:59:06 +0100 (CET)
To: Guillem Jover <[email protected]>, [email protected]
From: A Mennucc1 <[email protected]>
Openpgp: preference=signencrypt
Message-ID: <[email protected]>
Date: Sat, 2 Feb 2019 10:59:05 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101
 Thunderbird/60.4.0
MIME-Version: 1.0
In-Reply-To: <[email protected]>
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="oIPumQNdWANxmYlgsB59r788DXh9k5ZmD"
X-Greylist: delayed 468 seconds by postgrey-1.36 at buxtehude; Sat, 02 Feb 2019 10:06:56 UTC

[Message part 1 (text/plain, inline)]
Dear Guillem,

I see your point;

but (as the name " dpkg_L_faster" suggests), using the dpkg commands to
obtain meta-information is quite slow; so I will have to think about it

BTW: you write

>  And finally, the contents and its format, will be changing in
> the near future.
May you please point me to some more info regarding this change?

Thanks,

a.

Il 14/11/18 04:13, Guillem Jover ha scritto:
> Source: debdelta
> Source-Version: 0.62
> Severity: important
> User: [email protected]
> Usertags: dpkg-db-access-blocker
>
> Hi!
>
> This package contains a script («debdelta»), which directly accesses
> the dpkg internal database, instead of using one of the public interfaces
> provided by dpkg. The code in do_patch_, should be switched to use:
>
>   «dpkg-query --showformat='${Conffiles}\n' --show»
>
> to fetch the list of conffiles. Then _symlink_data_tree should be switched
> to always use dpkg_L, and dpkg_L_faster should be removed. Finally the
> code handling 'old-control-tree' should be switched to use something like:
>
>   «dpkg-query --control-list»
>
>
> This is a problem for several reasons, because even though the layout and
> format of the dpkg database is administrator friendly, and it is expected
> that those might need to mess with it, in case of emergency, this
> “interface” does not extend to other programs besides the dpkg suite of
> tools. The admindir can also be configured differently at dpkg build or
> run-time. And finally, the contents and its format, will be changing in
> the near future.
>
> Thanks,
> Guillem
>



[signature.asc (application/pgp-signature, attachment)]

Send a report that this bug log contains spam.

Debian bug tracking system administrator <[email protected]>. Last modified: Tue May 13 17:38:50 2025; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.