Packages with optflags and/or debuginfo issues

[Ville Skyttä]

Quite a few packages produce useless -debuginfos nowadays.  In addition to 
empty -debuginfos, a debuginfo package that contains some *.debug files but 
no sources is also quite likely not honoring $RPM_OPT_FLAGS, and if so, also 
very likely to have been built without compiler generated security features.  
Looks like reviewers should pay more attention to these issues (although they 
can obviously be introduced after reviews too).

More info, including some suggestions how to fix common cases: 
http://fedoraproject.org/wiki/Packaging/Debuginfo

Lists of susceptible packages in Core and Extras devel repos follows, and the 
crude script to produce this output is attached.  The output is not 100% 
bleeding edge; it's run against current public repos.  Some packages have 
already had bugs reported against them, and some already fixed in CVS.  The 
script currently excludes *.debug installed in %{_libdir}/gcj - I suppose 
rpmbuild does not know how to include sources for gcj's Java *.so.

---- Core devel i386 ----

$ debuginfocheck.py development-debuginfo
Importing additional filelist information

Empty debuginfo packages:
    aspell-nl-debuginfo
    at-debuginfo
    brltty-debuginfo
    busybox-debuginfo
    byacc-debuginfo
    check-debuginfo
    dbus-sharp-debuginfo
    dev86-debuginfo
    dosfstools-debuginfo
    ftp-debuginfo
    gecko-sharp2-debuginfo
    gnome-mime-data-debuginfo
    gnu-efi-debuginfo
    gpart-debuginfo
    intltool-debuginfo
    ipvsadm-debuginfo
    iscsi-initiator-utils-debuginfo
    isicom-debuginfo
    java-1.4.2-gcj-compat-debuginfo
    mktemp-debuginfo
    nmap-debuginfo
    passwd-debuginfo
    pkgconfig-debuginfo
    rdesktop-debuginfo
    symlinks-debuginfo
    syslinux-debuginfo
    sysstat-debuginfo
    system-config-boot-debuginfo
    timidity++-debuginfo
    traceroute-debuginfo
    vconfig-debuginfo
    wpa_supplicant-debuginfo
    yp-tools-debuginfo

Debuginfo packages without sources:
    beecrypt-debuginfo
    compat-gcc-296-debuginfo
    cpuspeed-debuginfo
    eclipse-cdt-debuginfo
    ed-debuginfo
    esc-debuginfo
    festival-debuginfo
    gtkhtml3-debuginfo
    hardlink-debuginfo
    ksh-debuginfo
    libdbi-debuginfo
    libdbi-drivers-debuginfo
    mozplugger-debuginfo
    nhpf-debuginfo
    pcmciautils-debuginfo
    pvm-debuginfo
    redhat-lsb-debuginfo
    rp-pppoe-debuginfo
    star-debuginfo
    statserial-debuginfo
    synaptics-debuginfo
    transfig-debuginfo
    xfig-debuginfo

961 debuginfo packages, 33 empty, 23 with no sources.

---- Extras devel i386 ----

$ debuginfocheck.py extras-development-debuginfo
Importing additional filelist information

Empty debuginfo packages:
    boo-debuginfo
    chemical-mime-data-debuginfo
    daap-sharp-debuginfo
    exaile-debuginfo
    factory-debuginfo
    freenx-debuginfo
    gtksourceview-sharp-debuginfo
    ipod-sharp-debuginfo
    libassuan-debuginfo
    libfac-debuginfo
    libnet-debuginfo
    libnet10-debuginfo
    libresample-debuginfo
    lightning-debuginfo
    monodevelop-debuginfo
    moomps-debuginfo
    openoffice.org-dict-cs_CZ-debuginfo
    plib16-debuginfo

Debuginfo packages without sources:
    BibTool-debuginfo
    Canna-debuginfo
    HelixPlayer-debuginfo
    TeXmacs-debuginfo
    arrows-debuginfo
    aterm-debuginfo
    atlas-debuginfo
    bin2iso-debuginfo
    blender-debuginfo
    cfitsio-debuginfo
    cksfv-debuginfo
    clisp-debuginfo
    csmash-debuginfo
    csound-debuginfo
    curry-debuginfo
    deltarpm-debuginfo
    emacs-vm-debuginfo
    gauche-gl-debuginfo
    gauche-gtk-debuginfo
    graveman-debuginfo
    hdf-debuginfo
    hdf5-debuginfo
    hevea-debuginfo
    hfsplusutils-debuginfo
    highlight-debuginfo
    initng-debuginfo
    initng-ifiles-debuginfo
    iperf-debuginfo
    jogl-debuginfo
    kicad-debuginfo
    kinput2-debuginfo
    libreadline-java-debuginfo
    libtasn1-debuginfo
    mediawiki-debuginfo
    mock-debuginfo
    mono-debugger-debuginfo
    mpc-debuginfo
    nas-debuginfo
    nmh-debuginfo
    nqc-debuginfo
    oddjob-debuginfo
    openalpp-debuginfo
    osgal-debuginfo
    pdftk-debuginfo
    pgadmin3-debuginfo
    php-pecl-xdebug-debuginfo
    revelation-debuginfo
    tuxpaint-debuginfo
    vigra-debuginfo
    vnc-reflector-debuginfo
    wfut-debuginfo
    wings-debuginfo
    xkeycaps-debuginfo

1677 debuginfo packages, 18 empty, 53 with no sources.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: debuginfocheck.py
Type: application/x-python
Size: 1590 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-maintainers/attachments/20070129/0e531d63/attachment.bin>