# files/compressed/gz -- lintian check script -*- perl -*- # Copyright (C) 2020 Felix Lechner # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, you can find it on the World Wide # Web at https://www.gnu.org/copyleft/gpl.html, or write to the Free # Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, # MA 02110-1301, USA. package Lintian::Check::Files::Compressed::Gz; use v5.20; use warnings; use utf8; use Const::Fast; use Time::Piece; use Lintian::IPC::Run3 qw(safe_qx); use Moo; use namespace::clean; with 'Lintian::Check'; # get timestamp of first member; https://tools.ietf.org/html/rfc1952.html#page-5 const my $GZIP_HEADER_SIZE => 8; has changelog_timestamp => ( is => 'rw', lazy => 1, default => sub { my ($self) = @_; # remains 0 if there is no timestamp my $changelog = $self->processable->changelog; if (defined $changelog) { my ($entry) = @{$changelog->entries}; return $entry->Timestamp if $entry && $entry->Timestamp; } return 0; } ); sub visit_installed_files { my ($self, $item) = @_; return unless $item->is_file; if ($item->name =~ /\.gz$/si) { safe_qx('gzip', '--test', $item->unpacked_path); $self->pointed_hint('broken-gz', $item->pointer) if $?; } # gzip files if ($item->file_type =~ /gzip compressed/) { my $bytes = $item->magic($GZIP_HEADER_SIZE); my (undef, $gziptime) = unpack('VV', $bytes); if (defined $gziptime && $gziptime != 0) { # see https://bugs.debian.org/762105 my $time_from_build = $gziptime - $self->changelog_timestamp; if ($time_from_build > 0) { my $architecture = $self->processable->fields->value('Architecture'); my $multiarch = $self->processable->fields->value('Multi-Arch') || 'no'; if ($multiarch eq 'same' && $item->name !~ /\Q$architecture\E/) { $self->pointed_hint( 'gzip-file-is-not-multi-arch-same-safe', $item->pointer); } else { $self->pointed_hint('package-contains-timestamped-gzip', $item->pointer,gmtime($gziptime)->datetime); } } } } return; } 1; # Local Variables: # indent-tabs-mode: nil # cperl-indent-level: 4 # End: # vim: syntax=perl sw=4 sts=4 sr et