Package: android-libboringssl
Version: 14.0.0+r11-4
Severity: serious
User: debian-arm@lists.debian.org
Usertags: time-t

Hi Roger,

Analysis of the archive for the 64-bit time_t transition[0][1] identifies android-libboringssl as a package shipping a library whose ABI changes on 32-bit architectures with 64-bit time_t.

However, android-libboringssl's shlibs file declares a dependency on a
library package name that contains no ABI information:

$ cat DEBIAN/shlibs
libcrypto 0 android-libboringssl (>= 14.0.0+r11)
libssl 0 android-libboringssl (>= 14.0.0+r11)
$

It is therefore not obvious that we should rename the package to 'android-libboringsslt64' as part of this transition.

Looking at the archive, there are packages built from separate source
packages, including adb and fastboot, that depend on this library.

Since there is no self-evident thing to do with the library package name
here, we will not be handling this package as part of the mass NMUs.
Instead I am filing a serious bug because partial upgrades from bookworm to trixie on 32-bit architectures (upgrading android-libboringssl without also upgrading adb, fastboot, etc) will result in ABI skew and may result in
broken behavior.

Thanks,
--
Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. Ubuntu Developer https://www.debian.org/ slangasek@ubuntu.com vorlon@debian.org

[0] https://wiki.debian.org/ReleaseGoals/64bit-time
[1] https://lists.debian.org/debian-devel/2024/01/msg00041.html

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEErEg/aN5yj0PyIC/KVo0w8yGyEz0FAmW6L7EACgkQVo0w8yGy Ez0ZWhAApgnuOrT1DNTqQ6zWT0hu4zcEWxmqFlbWgMDKA9m9ubTAdOCQx5auA1Hm oyBoT3Y7f7mmVo7GNEOusBJ70qrNrlxM5jnfXt0avVl7EVxh4qi+ptgQrXbuMR3n PvuWKvROBEevpt9Z/XLH2yB9fbIPjQMoltgWGyj+pRxIkIvnLJ3VT8DpHtZF4HEW zhJjJznd+FFvFJp4eYTT0uuByBV/wfuJK4iOXOktzJ7aTy39+AVH94k2KmnESzwQ 6sSNMHuFCH69Y8ww4gr6RUzLd6SSJTC+9uxKLRC9xWQN+EdrPeK8pnszZg5MQNQX TCdPQgN1W1Avgh2ekhR/ggSB/8DptIkJjJ6ZzE48dY4mmtxxMTd7wiPk302yJ8Aq GwzeJRCPD5KB0facBt5T6Hg4k/CLIBm1dcRjfqw5FvRxFnrLE3Lj3OpqZ3PFEllu s/iSd8lFmHjpkR5OHhv4QUxMvk16SXvM