Bug 1039520 - rpmbuild: Subpackage names are not sanity checked.
Summary: rpmbuild: Subpackage names are not sanity checked.
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: rpm
Version: rawhide
Hardware: All
OS: All
unspecified
medium
Target Milestone: ---
Assignee: Panu Matilainen
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-12-09 10:37 UTC by Zdeněk Pavlas
Modified: 2014-04-09 01:00 UTC (History)
8 users (show)

Fixed In Version: rpm-4.11.2-1.fc20
Clone Of:
Environment:
Last Closed: 2014-01-20 13:52:39 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
A sample .spec file (167 bytes, text/x-rpm-spec)
2013-12-09 10:37 UTC, Zdeněk Pavlas
no flags Details

Description Zdeněk Pavlas 2013-12-09 10:37:08 UTC
Created attachment 834301 [details]
A sample .spec file

Description of problem:

The argument to the '%package' directive is not sanity checked.  A space is rejected but almost anything else is accepted, including chars as ':' or '/'.

Version-Release number of selected component (if applicable):

How reproducible:

Always

Steps to Reproduce:
1. rpmbuild -bb dummy.spec
2.
3.

Actual results:

Invalid rpm created.

Expected results:

An error.

Additional info:

Related bug: BZ 1039276

Comment 1 Panu Matilainen 2014-01-08 13:56:45 UTC
Fixed upstream now, in the sense that the same sanity check is applied to both main pkg name and sub-packages. Whether the existing sanity check is entirely sane is another topic :)

Comment 2 Panu Matilainen 2014-01-20 13:52:39 UTC
In rawhide now as of rpm >= 4.11.2

Comment 3 Fedora Update System 2014-02-13 09:02:24 UTC
rpm-4.11.2-1.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/rpm-4.11.2-1.fc20

Comment 4 Fedora Update System 2014-02-13 09:44:10 UTC
rpm-4.11.2-1.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/rpm-4.11.2-1.fc19

Comment 5 lnie 2014-02-14 06:53:02 UTC
rpm-4.11.2-1.fc20 works

Comment 6 Fedora Update System 2014-02-16 23:22:14 UTC
rpm-4.11.2-1.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 7 Fedora Update System 2014-04-09 01:00:46 UTC
rpm-4.11.2-2.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.