~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to mir_reviews/lz4/audits/csp-source.txt

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
1
 
INFO: -N -a -A -D xenial -P -B -T xenial lz4_0.0~r131-1.dsc
2
 
Using the following defaults:
3
 
name: Ubuntu Archive
4
 
email: archive@ubuntu.com
5
 
Checking: lz4_0.0~r131-1.dsc
6
 
Mode: archive
7
 
 
8
 
Retrieving madison output:      pass
9
 
Distribution:                   pass
10
 
Pocket:                         pass
11
 
Maintainer:                     SKIP (archive)
12
 
Changed-By:                     SKIP (archive)
13
 
Source has orig.tar.gz:         pass
14
 
Recent date:                    SKIP (archive)
15
 
Output of diffstat:             SKIP (could not find debdiff or diff.*)
16
 
Vcs files in diffstat:          No such file or directory
17
 
pass
18
 
Vcs files in patch files:       SKIP: could not find 'lz4_0.0~r131-1.debdiff'
19
 
Version:                        SKIP (initial release?)
20
 
Newest version:                 FAIL
21
 
 Current: 0.0~r131-1
22
 
 Found:   0.0~r131-1
23
 
Diff chaff:                     pass
24
 
Merged changelog:               ignored
25
 
Changelog autocloses LP bugs:   pass
26
 
Patch system:                   SKIP: (diff not specified)
27
 
Patch tagging:                  SKIP: (diff not specified)
28
 
Check bashisms in 'debian':     pass
29
 
Reverse Debdiff:                SKIP: could not find 'lz4_0.0~r131-1.debdiff'
30
 
Bad files:                      pass
31
 
Vcs files in source:            INFO: found VCS files, please verify:
32
 
./programs/.gitignore
33
 
./examples/.gitignore
34
 
./.gitattributes
35
 
 
36
 
Ubuntu archive:
37
 
  lz4 | 0.0~r131-1        | xenial/universe | source
38
 
Debian archive:
39
 
 Not found in Debian testing, unstable or experimental
40
 
 
41
 
Has debian/watch:               FAIL
42
 
Output of lintian:              
43
 
 W: lz4 source: newer-standards-version 3.9.6 (current is 3.9.5)
44
 
 
45
 
Output of licensecheck:         
46
 
 Unique licenses:
47
 
  BSD (2 clause)
48
 
  GPL (v2 or later)
49
 
  UNKNOWN
50
 
 
51
 
 Full output:
52
 
  examples/blockStreaming_lineByLine.c: UNKNOWN
53
 
  examples/blockStreaming_doubleBuffer.c: UNKNOWN
54
 
  examples/printVersion.c: UNKNOWN
55
 
  lib/lz4frame.c: BSD (2 clause)
56
 
  lib/lz4frame.h: BSD (2 clause)
57
 
  lib/xxhash.c: BSD (2 clause)
58
 
  lib/lz4frame_static.h: BSD (2 clause)
59
 
  lib/xxhash.h: BSD (2 clause)
60
 
  lib/lz4.h: BSD (2 clause)
61
 
  lib/lz4hc.c: BSD (2 clause)
62
 
  lib/lz4.c: BSD (2 clause)
63
 
  lib/lz4hc.h: BSD (2 clause)
64
 
  programs/datagen.c: GPL (v2 or later)
65
 
  programs/datagencli.c: GPL (v2 or later)
66
 
  programs/datagen.h: GPL (v2 or later)
67
 
  programs/bench.h: GPL (v2 or later)
68
 
  programs/lz4io.c: GPL (v2 or later)
69
 
  programs/frametest.c: GPL (v2 or later)
70
 
  programs/fuzzer.c: GPL (v2 or later)
71
 
  programs/fullbench.c: GPL (v2 or later)
72
 
  programs/bench.c: GPL (v2 or later)
73
 
  programs/lz4cli.c: GPL (v2 or later)
74
 
  programs/lz4io.h: GPL (v2 or later)
75
 
 
76
 
Output of suspicious-source:    pass (empty)
77
 
Check bashisms in '.':          pass (skipped ./configure and ./config.guess)
78
 
chmod/chown in debian/:         pass
79
 
bash network redirections:      pass
80
 
/bin/sh as shell in debian/:    pass
81
 
Upstream source:                http://code.google.com/p/lz4/
82
 
Source build:                   pass
83
 
Statistics:
84
 
 Size (unpacked): 1M
85
 
 Number files: 82
86
 
 Number directories: 21
87
 
 Number symlinks: 0
88
 
 Estimated lines of source: 14127
89
 
Check existing binaries (may take a while): 
90
 
 found existing: liblz4-dev xenial/universe
91
 
 found existing: liblz4-1 xenial/universe
92
 
 found existing: liblz4-1-dbg xenial/universe
93
 
 found existing: liblz4-tool xenial/universe
94
 
 Total: 4 (new=0, existing=4)
95
 
------
96
 
FAILED