qemu 1.7 should build-depend on libfdt-dev higher than 1.4.0
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
device-tree-compiler (Debian) |
Fix Released
|
Unknown
|
|||
device-tree-compiler (Ubuntu) |
Fix Released
|
High
|
Unassigned | ||
Precise |
Fix Released
|
High
|
Unassigned | ||
Quantal |
Won't Fix
|
High
|
Unassigned | ||
Trusty |
New
|
Undecided
|
Unassigned | ||
qemu (Ubuntu) |
Fix Released
|
Low
|
Unassigned | ||
Precise |
Invalid
|
Undecided
|
Unassigned | ||
Quantal |
Invalid
|
Undecided
|
Unassigned | ||
Trusty |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
=======
Impact: libfdt-dev is unusable
Fix: we use the patch from debian wheezy to export the needed .h file.
Test case: download qemu package from trusty, remove the "<< 1.4.0" versioning from the libfdt-dev dependency, and try to build
Regression Potential there should be none, we simply export another .h file.
=======
The configure scripts checks for fdt by looking at libfdt_env.h
configure:2610: #include <libfdt_env.h>
This file only exists in libfdt-dev version 1.4.0 and onwards, so it makes sense to specify build-dependency on that version. Otherwise, configure fails with:
error_exit "DTC not present. Your options:" \
" (1) Preferred: Install the DTC devel package" \
" (2) Fetch the DTC submodule, using:" \
" git submodule update --init dtc"
CVE References
summary: |
- qemu 1.7 depends on libfdt higher than 1.4.0 + qemu 1.7 build-depends on libfdt higher than 1.4.0 |
summary: |
- qemu 1.7 build-depends on libfdt higher than 1.4.0 + qemu 1.7 shoudl build-depend on libfdt-dev higher than 1.4.0 |
summary: |
- qemu 1.7 shoudl build-depend on libfdt-dev higher than 1.4.0 + qemu 1.7 should build-depend on libfdt-dev higher than 1.4.0 |
Changed in qemu (Ubuntu): | |
status: | Confirmed → Fix Committed |
Changed in device-tree-compiler (Debian): | |
status: | Unknown → Fix Released |
tags: |
added: verification-done removed: verification-needed |
Thank you for taking the time to report this bug and helping to make Ubuntu better.
Trusty only ships qemu 1.7 and libfdt-dev 1.4, and the libfdt-dev in Saucy was also 1.4. So I'm not sure this should be necessary. But I don't see any harm in it, so I'll leave it to somebody closer to these packages to decide.