[Bug 1094761] New: Kiwi does not produce ISO that are compliant with the ISO9660 specs
http://bugzilla.opensuse.org/show_bug.cgi?id=1094761 Bug ID: 1094761 Summary: Kiwi does not produce ISO that are compliant with the ISO9660 specs Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening@forge.provo.novell.com Reporter: pete@akeo.ie QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- As per the following analysis by Thomas Schmitt, who investigated an error report reported against libcdio when trying to process openSUSE-Leap-15.0-DVD-x86_64.iso: http://lists.gnu.org/archive/html/libcdio-devel/2018-05/msg00008.html Specifically: ECMA-119, 7.3.3 "Both-byte orders" and 9.1.4 "Data Length (BP11 to BP18)" prescribe that the byte count of a data file is to be recorded as first a little-endian 32-bit number and then a big-endian 32-bit number. However, Kiwi only appears to patch the little-endian bytes into the ISO when it sets the final size of the affected files. For instance, you can find a file in openSUSE-Leap-15.0 that bears as size: e1 01 00 00 00 00 08 00 where the first four bytes are correct and the next four are wrong. This is probably because only the first four were overwritten by Kiwi, when it patched in the new size after manipulating the file content. Therefore, independently of a separate libcdio issue (which should gracefully warn when it finds such an inconsistency, rather than bail out), there is a definite problem with the way Kiwi updates the file sizes, as only seems to do half the job, which is in breach of the ECMA specs. Hopefully this specs compliance issue can be fixed for future releases of openSUSE. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1094761 Tomáš Chvátal <tchvatal@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bnc-team-screening@forge.pr |ms@suse.com |ovo.novell.com | -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1094761 http://bugzilla.opensuse.org/show_bug.cgi?id=1094761#c2 Dominique Leuenberger <dimstar@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P1 - Urgent CC| |dimstar@opensuse.org Severity|Normal |Major --- Comment #2 from Dominique Leuenberger <dimstar@opensuse.org> --- Thanks for letting such a bug bit-rot forever. This now hits us badly, since the bot producing the changelogs for the ISOs was upgraded to Leap 15.1, thus having a new libcdio that barks on such invalid files https://github.com/openSUSE/openSUSE-release-tools/issues/2128 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1094761 http://bugzilla.opensuse.org/show_bug.cgi?id=1094761#c3 --- Comment #3 from Dominique Leuenberger <dimstar@opensuse.org> --- One way around the issue being introduced with product-builder would be the upgrade of libcdio to version 2.1 - where the bigendian file size is discarded in favor of the little endian stored file size - thus ignoring the error introduced by product-builder (not eliminating the error alltogether though) This should be libcdio upstream commit http://git.savannah.gnu.org/cgit/libcdio.git/commit/?id=a4155f014c640e6896a4... -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1094761 http://bugzilla.opensuse.org/show_bug.cgi?id=1094761#c4 --- Comment #4 from Dominique Leuenberger <dimstar@opensuse.org> --- (In reply to Dominique Leuenberger from comment #3)
One way around the issue being introduced with product-builder would be the upgrade of libcdio to version 2.1
This is not an option for Leap - as libcdio changed ABI between 0.94 and 2.1 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1094761 http://bugzilla.opensuse.org/show_bug.cgi?id=1094761#c11 Adrian Schröter <adrian.schroeter@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #11 from Adrian Schröter <adrian.schroeter@suse.com> --- solved -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1094761 http://bugzilla.opensuse.org/show_bug.cgi?id=1094761#c12 Dominique Leuenberger <dimstar@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |adrian.schroeter@suse.com Flags| |needinfo?(adrian.schroeter@ | |suse.com) --- Comment #12 from Dominique Leuenberger <dimstar@opensuse.org> --- (In reply to Adrian Schröter from comment #11)
solved
really? The fix we published was to have libcdio actually accept the broken ISO images - but I'm not aware of any code change to actually no longer produce the images in a defective way. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1094761 http://bugzilla.opensuse.org/show_bug.cgi?id=1094761#c13 Adrian Schröter <adrian.schroeter@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED |--- --- Comment #13 from Adrian Schröter <adrian.schroeter@suse.com> --- I have to admit I only remember a discussion if should re-release old GA images and we decided to no. So I assumed that it got fixed... okay, re-open for validation. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1094761 http://bugzilla.opensuse.org/show_bug.cgi?id=1094761#c14 --- Comment #14 from Adrian Schröter <adrian.schroeter@suse.com> --- The fix: https://github.com/openSUSE/open-build-service/pull/9949 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1094761 http://bugzilla.opensuse.org/show_bug.cgi?id=1094761#c15 Adrian Schröter <adrian.schroeter@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution|--- |FIXED --- Comment #15 from Adrian Schröter <adrian.schroeter@suse.com> --- merged -- You are receiving this mail because: You are on the CC list for the bug.
participants (2)
-
bugzilla_noreply＠novell.com -
bugzilla_noreply＠suse.com