IRC log of #maemo-ssu for Wednesday, 2012-02-29

*** NIN102 has quit IRC00:01
*** rd has quit IRC00:02
*** zz_gri is now known as gri00:24
*** Free-MG has quit IRC00:33
*** trbs has quit IRC00:50
*** mirandir has left #maemo-ssu01:17
*** Pali has quit IRC01:28
*** ZogG has quit IRC01:29
*** ZogG has joined #maemo-ssu01:30
*** gri is now known as zz_gri01:41
*** M4rtinK has quit IRC02:30
*** nox- has quit IRC05:16
*** amiconn_ has joined #maemo-ssu05:19
*** amiconn has quit IRC05:19
*** amiconn_ is now known as amiconn05:20
*** BCMM has joined #maemo-ssu07:50
*** BCMM has quit IRC08:30
*** fw190 has joined #maemo-ssu09:13
*** amiconn has quit IRC09:27
*** amiconn has joined #maemo-ssu09:28
*** Pali has joined #maemo-ssu10:16
*** M4rtinK has joined #maemo-ssu10:21
*** zz_gri is now known as gri10:42
*** M4rtinK has quit IRC11:17
*** Pali has quit IRC11:17
*** dafox has joined #maemo-ssu11:24
*** M4rtinK has joined #maemo-ssu11:32
*** BCMM has joined #maemo-ssu11:41
*** M4rtinK has quit IRC11:42
*** DocScrutinizer has quit IRC11:46
*** DocScrutinizer has joined #maemo-ssu11:46
*** Pali has joined #maemo-ssu11:48
*** Free-MG has joined #maemo-ssu12:03
*** lizardo has joined #maemo-ssu12:24
*** rd has joined #maemo-ssu12:27
*** BCMM has quit IRC12:37
*** rd has quit IRC12:49
*** mirandir has joined #maemo-ssu13:19
Lava_Croftfbcmd would me nice for n90014:17
Lava_Croftcmd line posting to facebook14:17
*** mirandir has left #maemo-ssu14:40
*** gri is now known as zz_gri15:01
*** M4rtinK has joined #maemo-ssu15:40
*** mirandir has joined #maemo-ssu15:48
*** chainsawbike has quit IRC16:15
*** chainsawbike has joined #maemo-ssu16:18
*** dafox has quit IRC17:04
*** Pali has quit IRC17:06
*** dafox has joined #maemo-ssu17:21
*** dafox is now known as Guest1014317:21
*** Guest10143 is now known as dafox17:22
*** Pali has joined #maemo-ssu17:23
*** M4rtinK has quit IRC18:00
*** BCMM has joined #maemo-ssu18:06
*** Pali has quit IRC18:08
*** Pali has joined #maemo-ssu18:09
*** dafox has quit IRC18:41
*** NIN101 has joined #maemo-ssu18:58
DocScrutinizerdo you think your cmdlines look nice in facebook? ;-P19:35
*** BCMM has quit IRC19:41
freemangordonmerlin1991, ping19:50
*** NIN101 has quit IRC20:02
*** andre__ has quit IRC20:03
*** NIN101 has joined #maemo-ssu20:05
*** BCMM has joined #maemo-ssu20:06
merlin1991freemangordon: pong20:13
freemangordonmerlin1991, I need clutter-0.8.2 in CSSU.20:13
merlin1991what for?20:14
freemangordonthere is a nasty visual deffect in tasknav right now, want a description?20:14
freemangordonmerlin1991 ^^^20:15
merlin1991sure :)20:15
freemangordonok, open image-viewer, tap on a picture, tap once again to go to fullscreen20:16
freemangordonrotate to portrait20:16
freemangordonnow go to tasknav20:16
merlin1991hm nothing20:16
freemangordonoops, sorry20:17
freemangordongo back to IV20:17
freemangordonhold it in portrait20:17
freemangordonnoe scroll picture to the right20:17
freemangordon*now20:17
freemangordonand go to tasknav20:17
merlin1991hm no problem visible here20:17
merlin1991also I have no portrait in image-viewer (no forced rotation)20:18
freemangordonsure20:18
freemangordonit MUST be in fulscreen20:18
freemangordonthe picture I mean20:18
merlin1991ah jus realized that20:18
merlin1991now how do I go to tasknav then without leaving fullscreen?20:18
freemangordonshortcutd20:19
merlin1991don't have that20:19
freemangordonor ctrl-backspace somehow20:19
freemangordonyeah, ctrl-bckspc does the job20:20
merlin1991well with ctrl+backspace from fullscreen image viewer I have an extra 10 or so pixel of the image outside the preview frame20:20
merlin1991is that what you mean?20:20
freemangordonyeah, usually you have the whole picture you've scrolled to the right20:20
merlin1991and why does the updated libclutter fix that?20:21
merlin1991is it an actual libclutter bug?20:21
freemangordonthat is a bug in clutter cliping20:21
merlin1991and 0.8.2 is the lowest stable that has it fixed?20:21
freemangordonit clips only when the objects are not rotated20:21
freemangordono.8.2 is what is in repos20:21
freemangordonI made a patch for it20:21
freemangordonwhich clips when we have 90 deg rotation on Z axis too20:22
merlin1991now I'm realizing what you meant by I need clutter 0.8.220:22
merlin1991I thought you need an updated 0.8.2 from whatever maemo has :D20:22
freemangordon:)20:22
merlin1991yeah I'll get it on gitorious20:22
freemangordonnope, that is what maemo has20:22
freemangordon10x20:22
merlin1991would you have said i need clutter on gitorious, I wouldn't have been that confused :D20:23
merlin1991I'll do it after the bugmeeting?20:23
freemangordonok, no hurry20:23
*** fw190 has left #maemo-ssu20:25
*** arcean has joined #maemo-ssu20:45
*** M4rtinK has joined #maemo-ssu20:52
*** trbs has joined #maemo-ssu21:14
merlin1991freemangordon: is the source anywhere apart from in the sdk?21:17
*** merlin1991 has quit IRC21:24
freemangordonhttps://maemo.gitorious.org/fremantle-hildon-desktop/clutter_0_8/21:24
freemangordonseems 2 commits newer21:25
*** merlin1991 has joined #maemo-ssu21:26
freemangordonmerlin1991 ^^^21:27
merlin1991I timed out --> reading logs21:27
merlin1991damn I even checked on maemo.gitorious.org21:27
merlin1991I feel silly21:27
merlin1991any idea which branch is the proper one?21:28
freemangordonshould be master21:29
freemangordonmerlin1991, AIUI the one in maemo repos is only this https://maemo.gitorious.org/fremantle-hildon-desktop/clutter_0_8/commit/c52963eed32f0ded00b3b7c57fbfadca028be5bc commit behind gitorious21:36
merlin1991yeah, that tag for maemo66 is on the previous commit21:36
freemangordonwell, not exactly, but anyway :)21:37
merlin1991it is21:37
freemangordonhttps://maemo.gitorious.org/fremantle-hildon-desktop/clutter_0_8/commit/6a2f960811a809f4f5dc5f5e567900c5a8a23336 is the previous commit, but it is cosmetic21:37
merlin1991freemangordon: https://gitorious.org/community-ssu/clutter_0_821:38
freemangordon10x21:38
merlin1991I've pushed the proper branch + commit21:38
merlin1991now I have to find out why my server went offline21:39
freemangordonmerlin1991, maybe you should pull the last commit too, it is made by nokia21:41
Palimerlin1991, when is bugmeeting?22:03
freemangordonPali, now :)22:05
Paliok :)22:05
*** nox- has joined #maemo-ssu22:07
freemangordonmerlin1991, ping22:07
merlin1991sorry I'm here now22:10
merlin1991who else is around?22:10
freemangordonarcean, DocScrutinizer ping ?22:11
merlin1991DocScrutinizer, freemangordon, arcean, Pali ping22:11
arceani'm here22:11
Palipong22:11
freemangordonpong :)22:11
merlin1991mag not around as usual :/22:12
merlin1991anyway lets first start with a lil other stuff22:12
merlin1991arcean: I think freemangordon made a mg against your h-d?22:12
arceanyes22:13
freemangordonmerlin1991, arcean, there is still more to come :)22:13
arceanhehe, no problem :)22:13
freemangordonmerlin1991, the bug in clutter is just ine part of the issue22:13
merlin1991freemangordon:  k22:14
freemangordon*one22:14
arceantill saturday I have to end a task @ work22:14
DocScrutinizerI'm hungry and on my way out today. only available via DocScrutinizer5122:14
freemangordonThat is my deadline ? :p22:14
arceanso I will create MRs to CSSU on weekend22:14
merlin1991arcean: if you mg back against our h-d I suggest you remove the portrait lock commits from the branch22:14
freemangordonmerlin1991, why?22:14
merlin1991he initially started to refacter a lock that is not even in our master yet22:15
arceanmerlin1991, that's what i'm going to do :)22:15
merlin1991no point to merge back history that introduces something and removes it again22:15
freemangordonyeah, but why removing PL22:15
arceanfreemangordon, portrait lock is not working for Qt apps if you have switched off forced rotation22:15
merlin1991freemangordon: because before we start having a proper concept for rotation/lock I'd prefer to merge no related code22:16
merlin1991but I still want all the stuff from your code though22:16
freemangordonhmm, ok22:17
DocScrutinizersee backscroll for my comments on mce patching re rotation/orientation fixing22:17
freemangordonmakes sense22:17
DocScrutinizerin one line: we can't do that22:18
merlin1991Pali: how far are you with the ham patches?22:18
DocScrutinizero/22:18
PaliI did not tested it yet22:18
Palican somebody test HAM for upgrading CSSU?22:19
merlin1991I can, I've got 3 devices :D22:19
Paliok :-)22:19
Paliproblem with HAM is that HAM is slow22:19
merlin1991yeah22:20
merlin1991that's true :D22:20
merlin1991anyway lets get started on the bugs22:20
Paliand SLOW is because only one function is SLOW22:20
Paliok22:20
arceanPali, HAM is using apt-worker isn't it?22:20
Paliyes22:20
Palione function in apt-worker spending a lot of time (get all packages and select some)22:20
merlin1991first up bug #1187522:21
povbotBug https://bugs.maemo.org/11875 Battery drains quicker22:21
merlin1991I'm not sure what I should think about that one22:22
freemangordonthumb ;)22:22
Palineed info from powertop22:22
freemangordonmodestr restarts frequently, thus drains battery, FIXED22:23
merlin1991yeah we probably could say that22:23
arcean" but doing it frequently (about every 5-10 seconds from what I22:23
arceansaw)."22:23
arceanso, yes - crashes22:23
freemangordonWe can say it if FIXED for sure22:23
freemangordon*it is22:24
merlin1991okay next up bug #1188622:24
povbotBug https://bugs.maemo.org/11886 Modest: CTRL+ENTER doesn't send e-mail22:24
freemangordonclose it as fixed an ask author to reopen it if battery drain continues22:24
freemangordonthat was for the previous one22:24
merlin1991yeah :)22:24
merlin1991don't think we can do something about 11886 atm, since we have nobody who played with modeset active atm22:25
freemangordonwell, put it on the queue22:26
merlin1991yeah22:26
merlin1991next up bug #1196122:26
povbotBug https://bugs.maemo.org/11961 Random email application (modest) crashes with CSSU22:26
freemangordonFIXED22:26
merlin1991I belive that is also a fixed --> thumb22:26
merlin1991:D22:26
* merlin1991 wonders how many duplicated bugs of modest crashes a lot we have22:26
freemangordonat least 10 :D22:26
merlin1991next bug #1199222:27
povbotBug https://bugs.maemo.org/11992 CSSU installation changes "My location" to "Do not show"22:27
merlin1991I suppose I'll have to check if that one is even valid22:28
merlin1991but I bet it's simply related to the ham - update procedure22:28
freemangordonsure, but I cannot understand where on the status menu is availability22:29
freemangordonaaah, ok :D22:29
freemangordonmay be that is a part of going offline22:29
PaliI think that this may happen when you select device offline mode and then again online. HAM setting device offline mode when updating Maemo OS22:30
Palior it may happen is similar way22:30
freemangordonWONTFIX?22:30
merlin1991I suppose22:30
freemangordonnext?22:31
merlin1991ahhh a classic22:31
merlin1991bug #1202722:31
povbotBug https://bugs.maemo.org/12027 Screen is momentarily black during zaxisrotation22:31
freemangordonINVALID22:32
merlin1991yep22:32
freemangordonthat is by design22:32
freemangordoni.e. feature :D22:33
merlin1991I'd say so :)22:33
merlin1991next up bug #1205322:33
povbotBug https://bugs.maemo.org/12053 Modest drains battery22:33
merlin1991fixed ? :D22:33
arceanlol22:33
freemangordonduplicate22:33
merlin1991yea duplicate22:34
merlin1991next up bug #1208522:34
povbotBug https://bugs.maemo.org/12085 Can't edit Applications list in portrait22:34
merlin1991fixed22:34
freemangordonyeah, fixed22:34
freemangordonarcean?22:35
merlin1991I think so22:35
arceanverified fixed? or sth22:35
merlin1991yea22:35
merlin1991next bug #1215722:35
povbotBug https://bugs.maemo.org/12157 Camera UI  - randomly crashes22:35
Palineeds more info?22:36
merlin1991this one either is needinfo or fixed22:36
DocScrutinizer51needinfo22:36
merlin1991since 14.1 there've been a lot of stability fixes for camera-ui22:36
DocScrutinizer51comment: install dumphandler, deliver coredump22:37
freemangordon:nod:22:37
merlin1991next up bug #1254422:38
povbotBug https://bugs.maemo.org/12544 Stock Rss feed app not updating or downloading favicons and leaving residue after full phone flash22:38
freemangordonINVALID22:38
merlin1991well only partly22:38
Palirss is not part of CSSU22:38
merlin1991the favicon thing actually is partly22:38
merlin1991Pali: but it still works on stock22:38
merlin1991so we broke it somewhere on the way22:38
Palithis is bad22:39
arceanyep, it's true22:39
DocScrutinizer51eeeew22:39
freemangordonthat guy was trying to convince us that CSSU is leaving residues after rootfs+EMMC flash22:39
merlin1991it also works in stable22:39
merlin1991freemangordon: yeah he's weird22:39
DocScrutinizer51lol22:39
merlin1991but I tried myself the favicon part22:39
merlin1991it works on stock and stable22:39
merlin1991but not on testing22:39
PaliI tried contacting onion (he provided some rss fixes) but he is not responding...22:39
Palihe is online on #maemo22:40
freemangordonis that application QT?22:40
Palino, GTK22:40
arceanno, Hildon/GTK22:40
freemangordonhmm, what is the difference then?22:40
merlin1991nfc22:40
merlin1991but I guess it needs some serious debugging22:41
DocScrutinizer51step by step upgrade S to T and see when favicon breaks22:41
freemangordonagree22:41
merlin1991something for me then I guess22:41
merlin1991k22:41
freemangordonmerlin1991, if you are able to reproduce it, then ...22:41
DocScrutinizer51I'd start with allow-gui-rotation22:41
freemangordonforced-rotation?22:42
merlin1991well I could reproduce it on my -testing device without forced rotation22:42
merlin1991but I'll investigate22:42
freemangordonok22:42
merlin1991now the fun stuff is comind22:43
merlin1991bug #1255022:43
povbotBug https://bugs.maemo.org/12550 pango: CVE-2010-0421: Fix input sanitization22:43
DocScrutinizer51err wut?22:43
Palicreate git repo on gitorious CSSU22:43
merlin1991Pali: when the repo is there can you look into the patch?22:44
freemangordonwe should trust andre klapper(tm) on that22:44
freemangordonmerlin1991, in repos?22:45
Palihuh, that patch is funny :D22:45
merlin1991yeah since the commit actually is in the nokia hildon repos22:45
freemangordonmaybe we should leave it that way?22:45
merlin1991freemangordon: what do you mean?22:46
Paliit is in official nokia repo and not in official PR1.3?22:46
freemangordondo not clone it in CSSU repo22:46
merlin1991yes22:46
merlin1991pr1.3 still ships maemo4 of libpango22:46
freemangordonPali, the same with clutter22:46
Paliand reason why was not included?22:47
merlin1991nfc22:47
Palimaybe andre will know it22:47
arceanlimited manpower :D22:47
Palior we can write author of that patch22:47
merlin1991okay I'll contact andre and if he knows nothing I'll try to contact the author22:48
freemangordonmerlin1991, leave the question on the bugtracker22:48
merlin1991ah yeah actually true22:48
DocScrutinizer51wtfpango22:49
merlin1991DocScrutinizer51: hm?22:49
merlin1991next up bug #1255222:49
povbotBug https://bugs.maemo.org/12552 FreeType: CVE-2010-1797: Stack overflows by processing CFF opcodes22:49
DocScrutinizer51whats p22:49
merlin1991DocScrutinizer51: pango is font rendering22:50
merlin1991freetype too22:50
Palifor previous bug, see https://bugzilla.redhat.com/show_bug.cgi?id=55583122:50
povbotBug 555831: was not found.22:50
DocScrutinizer51tnx22:50
merlin1991are we going to trust andrew with the patch to 12552, or does somebody want to check it for sanity?22:51
merlin1991err s/andrew/andre/22:51
merlin1991Pali, freemangordon, arcean ^^ ?22:52
freemangordondon't we have an updated freetype in CSSU?22:52
freemangordonat least on gitorious22:52
merlin1991on gitorious but not in the repo22:53
Palion CSSU gitorious is some other bug fixed22:53
merlin1991yes segfault with navit22:53
PaliI think that this can be added to CSSU repo22:54
merlin1991whatabout the patch from andre though?22:54
merlin1991just add it on top?22:54
Palicould be22:55
freemangordonAsg MohammadAG which version is that in CSSU, where it came from22:55
arceanI think so, the patch looks ~ok22:55
freemangordon*Ask22:55
merlin1991freemangordon: that patch on gitorious came from tmo if I remember correctly22:55
freemangordonif it is from maemo repos, just add the patch from andre and ship it22:55
merlin1991original source is the redhat bugzilla22:56
freemangordonmerlin1991, ok, but where the sources came from?22:56
merlin1991ah you mean the base freetype?22:56
freemangordonyeah22:56
merlin1991I'll have to check that, but shouldn't be hard to find out22:56
freemangordonsure22:56
PaliI have other question, is there on maemo.gitorious.org other patches which is not part of PR1.3?22:56
merlin1991possibly22:56
freemangordonmost probably22:56
merlin1991nobody ever went over everything there22:56
freemangordonmerlin1991, put that in queue :)22:57
PaliI thoght that maemo.gitorious.org match SDK/PR1.3 version22:57
merlin1991not really22:57
freemangordonPali, no, it is ahead22:57
merlin1991okay I'll check with freetype then22:57
freemangordonok22:57
merlin1991next bug #1255322:58
povbotBug https://bugs.maemo.org/12553 Ctrl+space doesn't switch input language when editbox is hidden22:58
DocScrutinizer51what's the supposed procedure to migrate those bugfixes from T to S eventually?22:58
merlin1991DocScrutinizer51: package in T, if deemed stable off to S22:59
merlin1991nothing shortcuts at least a week of testing22:59
DocScrutinizer51as usual22:59
DocScrutinizer51yup22:59
freemangordonhmm, andre has done a descent job finding those patches22:59
merlin1991yes he did23:00
DocScrutinizer51we might need special procedure for security patches23:00
freemangordonwhy?23:00
*** lizardo has quit IRC23:00
DocScrutinizer51you don't want to delay a fix for a severe vulnerability23:00
Paliadding keyword security is enoght?23:00
freemangordonwell, those are delayed for 2 years already :D23:01
merlin1991exactly :D23:01
DocScrutinizer51yes, to trigger inspection23:01
merlin1991DocScrutinizer51: I suggest we simply push out a -testing with just all the cev stuff as soon as we worked through all of them23:01
DocScrutinizer51sure23:01
merlin1991and can take care of the other packages in the queue for testing later23:01
freemangordonagree23:01
DocScrutinizer51just thinking what if eventually...23:02
merlin1991anyway, back to 1255423:02
merlin1991err 1255323:02
DocScrutinizer51for now no Oday known23:02
DocScrutinizer51the xchat roguestring attack might be this class23:03
merlin1991yeah23:03
freemangordonmerlin1991, looks harmless, see no reason why not put it in CSSU23:03
merlin1991though afaik gtk still has no fix for that23:03
DocScrutinizer51yup23:04
merlin1991so about 12553, add hildon to cssu and include the fix?23:05
freemangordonyep23:05
arceanyes23:05
merlin1991oaky23:05
DocScrutinizer51bug 1255323:06
povbotBug https://bugs.maemo.org/12553 Ctrl+space doesn't switch input language when editbox is hidden23:06
merlin1991next up  bug #1255423:06
povbotBug https://bugs.maemo.org/12554 libcurl: CVE-2010-0734: data callback vulnerability23:06
freemangordonsame as previous23:07
merlin1991arcean, Pali?23:08
Palisorry but without full source code I do not understand this patch23:09
freemangordonPali, seems like some kind of buffer overrun23:09
arceanyes, and it's official patch23:09
Paliit is again CVE23:10
Paliso we can trust upstream23:10
merlin1991okay23:10
freemangordon:nod:23:10
merlin1991next up bug #1255523:10
povbotBug https://bugs.maemo.org/12555 microb-engine: CVE-2010-1205: Buffer overflow in embedded libpng23:10
Palipatches are commited into upstream repos23:11
Paliso we can include it23:11
freemangordonhmm, from the bug report it is not clear to me whether microb is affected as libpng is fixed in maemo23:12
arceanI think microb has its own libpng copy23:12
freemangordonwow23:12
merlin1991okay who wants to dig in the microb code?23:13
PaliI tried contacted authors of MicroB code23:13
merlin1991lemme guess, no answer?23:13
freemangordoni've done that once, it is a nightmare23:13
freemangordondigging throug microb23:13
PaliI can try to ask about that bug too23:13
freemangordonanyway, the bug seems valid, merlin1991, put that on the queue :)23:14
merlin1991freemangordon: on your queue? :D23:14
freemangordonon the queue in garage :p23:15
merlin1991I see23:15
merlin1991which in the end is my queue because I have to look into garage first :$23:15
merlin1991didn't find the time :/23:15
freemangordonhmm, can we ask DocScrutinizer to do that?23:15
DocScrutinizer51err what23:16
merlin1991DocScrutinizer51: feel like digging in code a lil to see if a patch is valid against our microb?23:16
freemangordonDocScrutinizer, what about opening and maintaining CSSU project on garage23:16
freemangordonmerlin1991 ^^^23:16
DocScrutinizer51umm, prolly no time23:16
merlin1991and ofc what freemangordon said :D23:16
*** peetah has quit IRC23:17
DocScrutinizer51atm I'm like 3h free time for also having lunch23:17
DocScrutinizer51dinner23:17
merlin1991bummer23:17
merlin1991okay next up is bug #1255623:17
povbotBug https://bugs.maemo.org/12556 libtiff: Various vulnerabilites23:17
DocScrutinizer51what's wrong with applying a patch and see if it fits?23:18
merlin1991DocScrutinizer51: the codebase in microb quite possibly is a lot different23:18
freemangordonDocScrutinizer51, most probably we will have to backport those patches23:18
DocScrutinizer51then patch will barf up23:19
Palihuh, there are bugs from year 2006, why Nokia did not backported it?23:19
merlin1991nfc Pali23:19
freemangordonDocScrutinizer51, and we will have the bug still in place23:19
merlin1991so who volunteers to go over all the libtiff patches?23:19
merlin1991crap, queue it is23:20
DocScrutinizer51dang, patch -p 1 *.patch23:21
freemangordonmerlin1991, really, that won't work. It is not only libtiff, all other patches from andre are the same. That is why i proposed to have a queue with pending issues, so when one fills like having free time to pick a task and to deal with it.23:21
freemangordon*feels23:21
merlin1991yeah I'll set up the queue23:21
merlin1991I'll look into garage this weekend23:22
merlin1991just was hoping somebody would feel like doing it :D23:22
merlin1991anyway next bug is #1255723:22
freemangordonmerlin1991, you're the maintainer :D23:22
merlin1991freemangordon: I fear so23:22
merlin1991bug #1255723:22
povbotBug https://bugs.maemo.org/12557 openssl: CVE-2010-0742: Cryptographic Message Syntax vulnerability23:22
DocScrutinizer51whos maintainer?23:23
freemangordonthe same as tiff and others23:23
merlin1991I think this one actually should be applyable23:23
freemangordonDocScrutinizer51, merlin1991 is THE maintainer23:23
freemangordonthe only one left23:23
DocScrutinizer51actually I think for T he's co-maintainer23:24
merlin1991ah wait, might not apply23:24
merlin1991DocScrutinizer51: the last T mag did practically was me putting together a list of packages that have patches and are ready and he just ran compiles23:24
DocScrutinizer51:nod:23:25
merlin1991oky 12557 goes  on the queue23:25
freemangordonmerlin1991, we could not decide right now on those patches23:25
DocScrutinizer51so much for a TSG ;P23:25
merlin1991freemangordon: yeah but we can filter those out who should go easy23:26
merlin1991like the one for freetype23:26
merlin1991or curl :)23:26
freemangordonok23:27
merlin1991hm next one is funky23:27
merlin1991bug #1255823:27
povbotBug https://bugs.maemo.org/12558 kernel/bluetooth: CVE-2010-1084: potential bad memory access with sysfs files23:27
*** Free-MG has quit IRC23:27
merlin1991ah shit23:27
merlin1991kernel shitstorm incoming23:28
DocScrutinizer51mehehe23:28
freemangordonfixed in KP50 :p23:28
Pali:D23:28
Paliwhat we need to include kernel in CSSU?23:28
merlin1991okay 12558 goes on the queue with the task of creating a proper upgrade system that does NOT kill user kernel23:29
freemangordonok23:29
merlin1991Pali: sane way to flash or not flash the kernel on update23:29
DocScrutinizer51merlin1991: mission impossible23:29
Paliok, so app which ask "do you want to flash kernel?"23:29
merlin1991Pali: it has to be something that works with ham, and the command line23:30
Paliok, no problem23:30
DocScrutinizer51also PK by no means is cssu grade stable23:30
Palikernel using for flashing some fiasco-* program23:30
DocScrutinizer51not even for T23:30
PaliDoc, we can remove some patches from kernel-power23:30
merlin1991Pali: actually I think kernel-power works well in extras23:30
Paliand use only bug-fix patches23:30
merlin1991so I would jsut but bug fixes into the kernel in cssu23:31
DocScrutinizer51well, that sounds good23:31
merlin1991ooops you were faster23:31
merlin1991anyway next bug #1255923:31
povbotBug https://bugs.maemo.org/12559 xserver-xorg-video-fbdev: Omap video overlay change not notified23:31
*** BCMM has quit IRC23:31
merlin1991tbh for me that one is a #needinfo23:32
Palineedinfo23:32
Paliwhy TRUE?23:32
DocScrutinizer51eh?23:33
merlin1991okay 12559 is needinfo23:34
merlin1991bug #1256023:34
povbotBug https://bugs.maemo.org/12560 alarmd does not correctly replace [COOKIE] in exec strings23:34
freemangordonagree23:34
merlin1991it's a clone of bug #1002523:34
povbotBug https://bugs.maemo.org/10025 alarmd 1.1.13 does not correctly replace [COOKIE] in exec strings23:34
merlin1991more info there23:34
freemangordonhold on23:34
DocScrutinizer51wtf COOKIE?23:34
merlin1991yeah nfc here too23:35
merlin1991ah: Once added to the queue, each alarm event is identified by a unique key, also known as a "cookie". The cookies can be used for deleting events, or retrieving information about a specific event.23:35
freemangordonmerlin1991, look at the original bug report23:36
merlin1991I'm not sure what I see though23:36
freemangordonseems you should pull alarmd too :)23:36
DocScrutinizer51well that might explain why alarmed app refused to delete events23:37
Palialarmd source code are on garage23:37
Palion svn23:37
merlin1991so pull alarmd and apply?23:38
merlin1991because I still don't see whet the actual problem is / how the fix works23:39
freemangordonmerlin1991, yeah, will test it more than usual.23:39
Palihere is svn repo: https://garage.maemo.org/plugins/scmsvn/viewcvs.php/?root=dsm23:39
DocScrutinizer51rhere's a fix?23:39
merlin1991DocScrutinizer51: bug #10025 includes a patch23:39
povbotBug https://bugs.maemo.org/10025 alarmd 1.1.13 does not correctly replace [COOKIE] in exec strings23:39
DocScrutinizer51mhm23:39
merlin1991pali the svn only goes up to 1.1.13, but maemo has 1.1.1623:40
DocScrutinizer51(moving, so afk for a minute)23:40
merlin1991freemangordon: so you want to look at that?23:41
freemangordonmerlin1991, so include code from repo23:41
Paliok, I only wrote because I saw this code on garage23:41
freemangordondo I have a choice? :)23:41
merlin1991nah :D23:41
merlin1991you saying will test it more than usual doomed you :D23:41
freemangordonput it in my queue (right after osso-pdf-viewer translation RE) :p23:42
merlin1991next one is for the queue again I guess23:42
merlin1991bug #1256423:42
povbotBug https://bugs.maemo.org/12564 microb-engine: Daemon does not shut down properly when no connection and browser closed when connection dialog opens23:42
freemangordonyeah23:43
freemangordonBTW merlin1991, you should pull all those packages on gitorious along with garage project23:43
merlin1991you lost me there23:44
merlin1991freemangordon: what do you mean?23:44
freemangordonI mean when queue on garage is ready, and someone pick a task from there, to have the source code already in CSSU repo23:45
freemangordonjust a suggestion23:45
merlin1991ah yeah sure23:45
merlin1991I'll put everything that goes on the queue onto gitorious23:45
freemangordonok23:45
merlin1991I wonder if there is some sort of sorting / catorizing possible on gitorious23:46
merlin1991something like subprojects23:46
freemangordonnfc23:46
merlin19912 more bugs then the list is through23:47
merlin1991bug #1256623:47
povbotBug https://bugs.maemo.org/12566 libxml2: CVE-2011-2834 DoS via double free in XPath handling23:47
DocScrutinizer\o/23:47
freemangordonmerlin1991, the same, put it in the queue23:47
merlin1991last one is also for the queue bug #1257523:48
povbotBug https://bugs.maemo.org/12575 microb-engine: CVE-2011-3026: Integer overflow in embedded libpng23:48
freemangordonneedinfo23:48
DocScrutinizerwhat's our trophy count for today?23:48
merlin19912023:49
DocScrutinizerneed WHAT?23:49
arceanhah, so there's embedded libpng in microb :D23:49
DocScrutinizerinfo on a CVE?23:49
freemangordonneedinfo, is microb shipped with maemo affected23:49
DocScrutinizernobody will answer that Q for you23:50
merlin1991freemangordon: all CVE bugs we've put on the queue are actually needinfo :D23:50
merlin1991anyway23:50
PaliNow I got answer from Microb author23:50
PaliHe updated some source code on garage23:50
merlin1991we've gone over all open cssu bugs that a serverity of normal or higher, I left out everything that is marked as enhancement23:51
merlin1991Pali: got a link?23:51
freemangordonPali, when, back in 2007?23:51
DocScrutinizerdang, 9 minutes left23:51
DocScrutinizerwe could got to 2323:51
Palihttps://garage.maemo.org/plugins/scmsvn/viewcvs.php/?root=browser23:51
merlin1991DocScrutinizer51: nothing left but enhancements23:52
merlin1991I suggest we do the enhancement stuff another time23:52
DocScrutinizer:)23:52
merlin1991but I also suggest that next week same time we see what we've got for a -testing update23:52
merlin1991Pali, arcean, freemangordon, DocScrutinizer?23:53
arceanagree23:53
DocScrutinizersure23:53
Paliok23:53
freemangordonok23:53
DocScrutinizerthough... missing input here23:53
merlin1991what do you mean?23:53
DocScrutinizeryou might have noticed I'm not the legendary 24/7-online bot anymore23:54
merlin1991yeah :D23:54
DocScrutinizerso I dunno lots about stability of recent changes in T23:54
DocScrutinizercouldn't comment on "passed/not passed quarantine"23:55
merlin1991recent t has nothing for S atm if I recall correctly23:55
DocScrutinizerwill comment on a proper implementation of a community/user driven review scheme instead ;-D23:56
merlin1991btw DocScrutinizer I guess changing wlancond back didn't fix your crash issues?23:56
PaliHere is info about bug 12555 which I got from MicroB author:23:56
povbotBug https://bugs.maemo.org/12555 microb-engine: CVE-2010-1205: Buffer overflow in embedded libpng23:56
PaliThis bug can be fixed on microb-engine level - no need UI changes for that.23:56
PaliAlso in general case with existing sources it is even possible to make23:56
Palithat UI work with Latest Mozilla-central engine sources ... and even23:56
Palimake port on webkit.23:56
DocScrutinizermerlin1991: I didn't so anything23:56
DocScrutinizerdo*23:57
DocScrutinizeractually that crash also happens rather rarely23:57
DocScrutinizerjust by random I had some more than usual incidents just before last week23:58
DocScrutinizerused Fahrplan like 10 times since, no issues23:58
merlin1991Pali: could you ask him if he's interested in doing the microb changes for cssu?23:59
DocScrutinizerPali: that sounds all pretty nice, but... what does it mean to us?23:59
Palimerlin1991, I will ask23:59

Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!