[arch-dev-public] [signoff] bzip2 1.0.5-1

[Tom K]

Dan McGee wrote:
> gnupg:
> <bzip2 1.0.5-1 is installed here>
> ./configure --disable-keyserver-helpers --disable-card-support
> --disable-photo-viewers
> $ make
> $ ll g10/gpg
> -rwxr-xr-x 1 dmcgee users 2.3M 2008-04-15 13:02 g10/gpg
> $ strings g10/gpg | grep BZ2
> BZ2_crc32Table
> BZ2_rNums
> $ ll tools/gpgsplit
> -rwxr-xr-x 1 dmcgee users 249K 2008-04-15 13:01 tools/gpgsplit
> $ strings tools/gpgsplit | grep BZ2
> BZ2_crc32Table
> BZ2_rNums
> $ make clean
> <installed bzip2 1.0.4-3 here>
> $ make
> $ ll g10/gpg
> -rwxr-xr-x 1 dmcgee users 2.2M 2008-04-15 13:07 g10/gpg
> $ strings g10/gpg | grep BZ2
> BZ2_bzCompressInit
> BZ2_bzDecompressEnd
> BZ2_bzDecompress
> BZ2_bzCompress
> BZ2_bzCompressEnd
> BZ2_bzDecompressInit
> $ ll tools/gpgsplit
> -rwxr-xr-x 1 dmcgee users 115K 2008-04-15 13:06 tools/gpgsplit
> $ strings tools/gpgsplit | grep BZ2
> BZ2_bzDecompressEnd
> BZ2_bzDecompress
> BZ2_bzDecompressInit
> 
> I didn't see how it could relate either, and I'm not using pkgconfig
> with pacman, I know that for sure. But something weird is going on
> here.
> 
> -Dan
> 
> 

Found it. Our PKGBUILD links /lib/libbz2.so to /lib/libbz2.so.$pkgver, 
but the dev has not bumped the so number - I suppose because this 
release is only for the vuln fix in bzlib.c. So we're linking to 
nothing, which means building against bzip2 uses static.

-2 on the way.
T.