• Re: [SECURITY] [DSA 5113-1] firefox-esr security update

    From Friedhelm Waitzmann@21:1/5 to All on Fri Apr 8 14:20:01 2022
    On Wed, 2022-04-06 at 17:11:21 +0000 Moritz Muehlenhoff wrote in the mailing list debian-security-announce:

    For the oldstable distribution (buster), these problems have
    been fixed in version 91.8.0esr-1~deb10u1.

    Where can I get this from for buster and architecture i386?
    <http://security.debian.org/debian-security/dists/buster/updates/main/binary-i386/Packages.xz>
    does not have it.


    Kind regards,
    Friedhelm.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Moritz =?UTF-8?Q?M=C3=BChlenhoff?=@21:1/5 to Friedhelm Waitzmann on Sat Apr 9 23:40:01 2022
    Friedhelm Waitzmann wrote:
    For the oldstable distribution (buster), these problems have
    been fixed in version 91.8.0esr-1~deb10u1.

    Where can I get this from for buster and architecture i386? <http://security.debian.org/debian-security/dists/buster/updates/main/binary-i386/Packages.xz>
    does not have it.

    The Firefox ESR91 series triggers an internal compiler error
    with the GCC version included in Debian 10, so there's no build
    available currently.

    There's one for Debian 11 (where GCC builds it correctly), but
    I'd instead suggest to switch to amd64 instead.

    Cheers,
    Moritz

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Odo Poppinger@21:1/5 to All on Mon Apr 11 13:50:01 2022
    I am still using i386 on some machines. Isn´t it possible to build with another gcc or to update gcc?

    On 09.04.22 23:31, Moritz Mühlenhoff wrote:
    Friedhelm Waitzmann wrote:
    For the oldstable distribution (buster), these problems have
    been fixed in version 91.8.0esr-1~deb10u1.
    Where can I get this from for buster and architecture i386?
    <http://security.debian.org/debian-security/dists/buster/updates/main/binary-i386/Packages.xz>
    does not have it.
    The Firefox ESR91 series triggers an internal compiler error
    with the GCC version included in Debian 10, so there's no build
    available currently.

    There's one for Debian 11 (where GCC builds it correctly), but
    I'd instead suggest to switch to amd64 instead.

    Cheers,
    Moritz


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Moritz Muehlenhoff@21:1/5 to Odo Poppinger on Tue Apr 12 00:10:01 2022
    On Mon, Apr 11, 2022 at 01:45:56PM +0200, Odo Poppinger wrote:
    The Firefox ESR91 series triggers an internal compiler error
    with the GCC version included in Debian 10, so there's no build
    available currently.

    I am still using i386 on some machines. Isnt it possible to build with another gcc or to update gcc?

    It is possible; if someone tracks down the respective GCC change and backports it to GCC 8 in Buster or alternatively lands a patch in the ESR91 branch
    which changes the code to no longer trigger the ICE, that would fix it.

    But realistically the number of people who actively care about i386 support is really, really small so I wouldn't count on it...

    Cheers,
    Moritz

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Friedhelm Waitzmann@21:1/5 to All on Tue Apr 12 06:20:01 2022
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Dear Moritz!

    Moritz Mühlenhoff:
    Friedhelm Waitzmann wrote:
    For the oldstable distribution (buster), these problems have
    been fixed in version 91.8.0esr-1~deb10u1.

    Where can I get this from for buster and architecture i386?
    <http://security.debian.org/debian-security/dists/buster/updates/main/binary-i386/Packages.xz>
    does not have it.

    The Firefox ESR91 series triggers an internal compiler error
    with the GCC version included in Debian 10, so there's no build
    available currently.

    Thank you for defining this.


    There's one for Debian 11 (where GCC builds it correctly),


    In the near future I will migrate to Debian 11.


    but I'd instead suggest to switch to amd64 instead.


    You mean, that it is possible to run amd64 on my old hardware


    1#

    vendor_id : GenuineIntel
    cpu family : 6
    model : 22
    model name : Intel(R) Celeron(R) CPU 440 @ 2.00GHz
    stepping : 1
    microcode : 0x43
    cpu MHz : 1229.629
    cache size : 512 KB

    and

    2#

    vendor_id : GenuineIntel
    cpu family : 15
    model : 2
    model name : Intel(R) Pentium(R) 4 CPU 2.00GHz
    stepping : 4
    cpu MHz : 1993.656
    cache size : 512 KB

    ?

    And if it is indeed possible, how can I switch from i386 to
    amd64? Can this be done with the apt tools? Then during the
    migrating some packages will be from amd64 already while others
    will be still i386. How does that go right?



    I suggest, that further discussing should take place in debian-amd64@lists.debian.org.



    Kind regards,
    Friedhelm


    My OpenPGP‐Key:

    - -----BEGIN PGP PUBLIC KEY BLOCK-----

    mQENBFoCvhgBCADnymmMgAzxsUqP9GPSK+QJATL4w/C8KS7ghUdu7TT4mdEfMfgI BteRnqWJvLzlBFlQRBEXQphxfgtAdTAZDdAlcyXkcA19Sb0Z09/oQgPe4vp99Cnp kq2GPOxSk6YQrfs4FF6p4lsQUz0TKONSztZGo4VSyT1G+LpsSxm7Q1YUzpO4j5fy XfPMB/TdhpJbKlE4yVldwVdt4+Gc8oTeohVkZZtVx9bplmaVLaj35HrRTupj75IS tooF5dTVLQVhQYKqDCd2DKiZiUuKt6K9ZtrpmjnWaWRayKmJdJ14R8/Q7VfSyXOx fLb4DNDz4FNUPOvHdXYjhsTz1U6v1kaddMXdABEBAAG0E0ZyaWVkaGVsbSBXYWl0 em1hbm6JAWAEEwEKAEoCGwECHgECF4ALCw0JCgwICwcEAwIIFQoJCAsDAgEFFgMC AQACGQEFCQuP3SgWIQRGyPH+W3hgUPhyflPQtV81ksAM7QUCYbLp7wAKCRDQtV81 ksAM7cr5B/wO1khGTl3dAh46DY2jxe3jTfPvicbQgZQVwOhhP2FPKIFC8dYVCEHk oYQapW47YXufw/Qw71GILfMtZemiUJpHwa/thCPtP3clE53ZqsEdArHDX2ZYm3Ol qDTxMuilQCDfGuatg6MVQ8SlUbhcGIGyr4O4cPeDe0kmUOQhp8wKTXkmhq3Yml5+ 2XRu69TZUNsQh3TPi50hR+RB0YjI+KTBKYSanAYM44Bj6mti6+06UkRVMaFxLVzS BAEyTf/SBaKkJq4cKe+gCzcc/Gg8jrxKVcQRPdUxOlvWUiYT5FYRaFuklgDW4B+g 23FdO6RkE0Z+g/oLeAYSqj/JMfjv77bFtBlmYWNoMjIwNDA4LmZ3bnNwQHhveHku bmV0iQFdBBMBCgBHFiEERsjx/lt4YFD4cn5T0LVfNZLADO0FAmJQFg8CGwEFCQuP 3SgLCw0JCgwICwcEAwIIFQoJCAsDAgEFFgMCAQACHgECF4AACgkQ0LVfNZLADO2V ygf9HQWjolhnGRNWG5845lh2uTrm/5q19+hKwnQHx7HApZia09kXp7QpxTCmSmnq skWto08U/iT1sPqFTOojOZAM6e4zr7kz/VJksJx8lswUkTRyGXqGEQoQ7bZvd6XR Yu0ZKfNNZhvjfPzzwyp+85lWWIaNA0cQyIa6BRzlNhgCbyLhksy4GDkzoBPxhNOp mboohSVOnLjrUbQpfKCDJtAaNps95+4gv2t8JPtyFcZW9qKWFRIdJJvamc3lp4Il JwzXRElB1htSHQb4SA2VN9M6ALdnfZXXT+H8UKKek+joE8Xm15FX83E5pmrE/8lp imVg0s0BAUd0DxVj6zj4SI9yhrkBDQRaAsK/AQgAyBEE1hjgZ6F33GPSkfxsFqsN L5lQrRTQtx5GKPt5UnIKK00TAevGoI8VDftuP6Fpp9kFJ+HSAiW3M+8S70H3UnbW 8AFofSd28AUvnnhP4ATwRcVm35+HYUge4lKiy5bEvDS9bALJqlW9sHBUF+gebrmh 0CgvD0sQSUE4PLAuHFUJG8/fezReXGB2MSVAbu8NXHdlJ6vPr5ERlg7A0JFR9Knx s8PoI/1hd73mwGld9/Xo3xByDbJ7Uejjt3HpNZf9eOq3XPp02dpKsOQEB2QxxPHI TcBH8IBZY78BJHq9UD4g3fD904oIvs38BzvX/WAMO9W0k1ZLfF1zyR0+QXQweQAR AQABiQJEBBgBAgAPAhsCBQJcRWq9BQkU+H0OASnAXSAEGQECAAYFAloCwr8ACgkQ gEIvCiHZTet1zwf/TUmPpwnBgoA6AXILI5R/NvZit30mbExa6byBOK9vEbGS8pSu L/GN5tzTmyJoGbLNc24h8w6FwcoxE0xJSUJKp7nO95NWD/kO5n8alJZN9ph8I2yt Cl3dhzZKw8+j+WBwTrKLdDP5lfarI0gz6+N1UtFH4U+tUCq56DQqu46xyTS5ASeM iO/8Ykej9LiObZv9QYwnKkhM8y+Dw9dkPfIsqt47uE4j4czpJ4qv8236oV/luR44 8cCud5G7ZGxBj6DSnitZM2lbq5yTlIZ3EEvu/I9dE/vsPaWQmGeo6S03FJ8+S6Xn eP8mgYWl9YGJTjDvUg3FU9fXfHzCuFtZ/1YZvAkQ0LVfNZLADO2zEggAi3myJcVA yiftlZSkTrId9LNeQtXCw7tkJcuaGIC/FWJQhVofcp2CuEAm26w9xRN39Tp7pi2r fta/xykj0iYNjmqgi7MWK6pZOY/LCTEOMfYiWX4LCJ89f51y2TTmWwgfWXxFVe8y lyRMC1N2CXEd5xsEKA1ZI5vF3ikjVkMBAtLGiSxcyBi8YbcDFG4/fTBNpeEvXZ6n CusDDYCArwFiQi4mRtDbZXBZIBVE+jwYlzw0bz3EeqkPFMJ/pvuWeQ5R9LSuVYhh aVieqoLXmK6uwQLoJOFx67KX+BoEPpkVa/FmDhfpguQrKz5/Eq1Lhy8P28EAhLSG Ar1XuxedRos/pLkBDQRaAsFpAQgAm4sZiVbFI6YpR3yDFpe7qOkkWmlk+7MT8cAa j5Ltm+mXqf7ZHDNeX9mzMNBZeoUBCztp0n/N0Iu5T7MmEJV/rrJa0N8ezjY9kDTX xUmLRmXTM/AM7Jg6dsIOf/lrd2TAagUkf/nYS9Sxx7/MvWESis3uYw8aqpuXjS0t FgaG3umvTfvgI2SamuZTkdt9KmoqKCFcf5qjNk7PeY0REVYUp0/mfyPDo7s33yOm P0x9wy6zeZ4OKAsSETvARj8WafUT7vikVuZEtfiLolT741y2VtvyBICooLsVZ6Pf MMle4newVhbZeJAjUTdxoE4T+B1vMICsbNw2/zsYtM/9KKvWpwARAQABiQElBBgB AgAPAhsMBQJcRWqNBQkU+H5mAAoJENC1XzWSwAztix8IAN+/SZI+fr6AkLuC0X+0 FxpsSD3n89XQja+nTrVTODu2c1BDi0bXOMwcOyRqnnZ1F/tKieVQsfpvZoumF7Wi fs9O3Mlt9Tw1b+g7tfnTj3a9GP6AiYzt/Zde2YGhbZ+65AOwka8DegWm+R6JuLds y6oERH1BzGytG/c6pKY17XiMnXTdjwvN+YuSJ89eqA90KzoIOVCx9kWVagxzWh6u WioiuAStwrUmZ+KOFhQbmXtEO+fUHf+G9J5DtlKFLHjz4Qy88z0jdGvE0Yf3r46q d8mzOSlOX9N2LWTR+bFuN9DYeoQmDyibEM5W9dNH4Fn8F8wKyMgX33bz/ougs6+m
    re0=
    =Dl6i
    - -----END PGP PUBLIC KEY BLOCK-----
    -----BEGIN PGP SIGNATURE-----

    iQFOBAEBCgA4FiEEzf8af16GP0HJOpBzgEIvCiHZTesFAmJU+IkaHGZhY2gyMjA0 MDguZnduc3BAeG94eS5uZXQACgkQgEIvCiHZTes+kgf+JNvqEsOzHnGAzzcthB6+ MEDj4LgFPN3ZwttzOz62k+yHUvYtffjdoyXfoiwDkCDBhFUAC46r0rcy12pspzQU PQ/2SXTd08FuWiMtLRMGm5wYN5WTDp7NFXWqlmtwYe9zz98PgYc9SGToRr10yVwg Xsv9ZwxFMZyupkLlTt4yLZoIGdM3oHOXhZlzaG/QG4WNDo/PBOHcAODOPVP1TEJH nCj64nrZwB5hNykdFzVO0caiaoaBKybud3dAbYU6gIjJOZ/wEDTJa2sbdvKwryPE ofYqWK7UgPv+DJhU+bk6c0vgTTbD6gN9jb2sLkyhM6GjkHjSM58rcmaApppbb0Ls
    Cg==
    =pE5x
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elmar Stellnberger@21:1/5 to All on Wed Apr 13 22:10:01 2022
    On 09.04.22 23:31, Moritz Mühlenhoff wrote:
    Friedhelm Waitzmann wrote:
    For the oldstable distribution (buster), these problems have
    been fixed in version 91.8.0esr-1~deb10u1.

    Where can I get this from for buster and architecture i386?
    <http://security.debian.org/debian-security/dists/buster/updates/main/binary-i386/Packages.xz>

    does not have it.

    The Firefox ESR91 series triggers an internal compiler error
    with the GCC version included in Debian 10, so there's no build
    available currently.

    There's one for Debian 11 (where GCC builds it correctly), but
    I'd instead suggest to switch to amd64 instead.

    Cheers,
    Moritz


    Could it be that also other programs are affected by this issue?
    I have been building Coan (one of my programs) recently on the OBS and
    it did not build on Debian10/i586 giving an error at
    /usr/lib/qt5/bin/moc. The amd64 target did build well. Since all
    reasonable Qt programs use moc (Qt´s meta object compiler, see: signals)
    that would then mean that none of the Qt programs would build. Can that
    be true?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elmar Stellnberger@21:1/5 to Elmar Stellnberger on Wed Apr 13 22:30:01 2022
    On Wed, Apr 13, 2022 at 09:52:13PM +0200, Elmar Stellnberger wrote:
    On 09.04.22 23:31, Moritz Mhlenhoff wrote:
    Friedhelm Waitzmann wrote:
    For the oldstable distribution (buster), these problems have
    been fixed in version 91.8.0esr-1~deb10u1.

    Where can I get this from for buster and architecture i386?
    <http://security.debian.org/debian-security/dists/buster/updates/main/binary-i386/Packages.xz>

    does not have it.

    The Firefox ESR91 series triggers an internal compiler error
    with the GCC version included in Debian 10, so there's no build
    available currently.

    There's one for Debian 11 (where GCC builds it correctly), but
    I'd instead suggest to switch to amd64 instead.

    Cheers,
    Moritz


    Could it be that also other programs are affected by this issue?
    I have been building Coan (one of my programs) recently on the OBS and it
    did not build on Debian10/i586 giving an error at /usr/lib/qt5/bin/moc. The amd64 target did build well. Since all reasonable Qt programs use moc (Qts meta object compiler, see: signals) that would then mean that none of the Qt programs would build. Can that be true?


    I am still using Mageia 7 on an old PIV of mine and it has a
    similar gcc. Neither does there appear to be a problem with
    Firefox. Anyone knows if the same issue appears with other
    distros as well?

    Deb 11: gcc 10.2.1-1
    Deb 10: gcc 8.3.0-1
    Mg 7: gcc-8.4.0-1

    Deb10: firefox 91.8.0esr-1
    Mg 7: firefox 78.11.0-1

    P.S.:
    The moc error message I get with Debian 10 for Coan is the following:
    [ 244s] usr/include/c++/8/bits/stl_relops.:67: Parse error at "std"

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elmar Stellnberger@21:1/5 to Maurice Dirr on Thu Apr 14 11:10:01 2022
    On Thu, Apr 14, 2022 at 11:01:06AM +0200, Maurice Dirr wrote:
    Are you running KDE programs on a Pentium 4?
    How can that work without hardware acceleration?


    Well QCoan is a plain Qt program, not a KDE app, but Yes I am
    running KDE apps on that PIV. You have to use
    export LIBGL_ALWAYS_SOFTWARE=1

    I have put that at the beginning into my /etc/lxdm/Xsession,
    so that I do not always have to start from console exporting an
    environment variable. I want to access these apps from the start
    menu of the GUI and thus the variable needs to be defined for
    the whole X-session.

    On 14.04.22 10:52, Elmar Stellnberger wrote:
    Could it be that also other programs are affected by this issue?
    I have been building Coan (one of my programs) recently on the OBS and it did not build on Debian10/i586 giving an error at /usr/lib/qt5/bin/moc. The
    amd64 target did build well. Since all reasonable Qt programs use moc (Qts
    meta object compiler, see: signals) that would then mean that none of the Qt
    programs would build. Can that be true?


    I am still using Mageia 7 on an old PIV of mine and it has a
    similar gcc. Neither does there appear to be a problem with
    Firefox. Anyone knows if the same issue appears with other
    distros as well?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elmar Stellnberger@21:1/5 to Elmar Stellnberger on Thu Apr 14 15:00:01 2022
    On Thu, Apr 14, 2022 at 02:50:32PM +0200, Elmar Stellnberger wrote:
    On Sat, Apr 09, 2022 at 11:31:01PM +0200, Moritz Mhlenhoff wrote:
    Friedhelm Waitzmann wrote:
    For the oldstable distribution (buster), these problems have
    been fixed in version 91.8.0esr-1~deb10u1.

    Where can I get this from for buster and architecture i386? <http://security.debian.org/debian-security/dists/buster/updates/main/binary-i386/Packages.xz>
    does not have it.

    The Firefox ESR91 series triggers an internal compiler error
    with the GCC version included in Debian 10, so there's no build
    available currently.

    I am also running Debian 10 on my Asus eeePC (Pentium M). I
    am mainly using it as a dictionary. Although I am performing
    security updates quite regularely I have not run into this
    issue. Having updated just now I am with Firefox
    78.15.0-esr-1~deb10u1 and with
    ** 4:8.3.0-1 being offered by

    - I mean the gcc version

    apt-cache.
    Have I missed something or is the problem already resolved?


    Firefox works good on it like always.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elmar Stellnberger@21:1/5 to All on Thu Apr 14 15:00:01 2022
    On Sat, Apr 09, 2022 at 11:31:01PM +0200, Moritz Mhlenhoff wrote:
    Friedhelm Waitzmann wrote:
    For the oldstable distribution (buster), these problems have
    been fixed in version 91.8.0esr-1~deb10u1.

    Where can I get this from for buster and architecture i386? <http://security.debian.org/debian-security/dists/buster/updates/main/binary-i386/Packages.xz>
    does not have it.

    The Firefox ESR91 series triggers an internal compiler error
    with the GCC version included in Debian 10, so there's no build
    available currently.

    I am also running Debian 10 on my Asus eeePC (Pentium M). I
    am mainly using it as a dictionary. Although I am performing
    security updates quite regularely I have not run into this
    issue. Having updated just now I am with Firefox
    78.15.0-esr-1~deb10u1 and with 4:8.3.0-1 being offered by
    apt-cache.
    Have I missed something or is the problem already resolved?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elmar Stellnberger@21:1/5 to Elmar Stellnberger on Thu Apr 14 19:00:01 2022
    On 14.04.22 14:52, Elmar Stellnberger wrote:
    I am also running Debian 10 on my Asus eeePC (Pentium M). I
    am mainly using it as a dictionary. Although I am performing
    security updates quite regularly I have not run into this
    issue. Having updated just now I am with Firefox
    78.15.0-esr-1~deb10u1 and with
    ** gcc 4:8.3.0-1 being offered by


    I have looked at the build log of QCoan in the OBS and it is using gcc-8-8.3.0-6. That is even newer than what got installed by the
    updates. I would thus believe that the gcc bug is still there that
    prevents some Firefox version from building, but that I simply have not
    noticed this issue via the normal upgrade process.
    Another explanation would of course be that the two errors are unrelated.

    Where can I get this from for buster and architecture i386?

    <http://security.debian.org/debian-security/dists/buster/updates/main/binary-i386/Packages.xz>

    does not have it.

    Friedhelm, how have you taken notice about this issue?
    Was the file really not there or do you think you have forgotten to type firefox-esr instead of firefox or something the like?

    Package : firefox-esr
    CVE ID : CVE-2022-1097 CVE-2022-1196 CVE-2022-24713
    CVE-2022-28281
    CVE-2022-28282 CVE-2022-28285 CVE-2022-28286
    CVE-2022-28289

    Multiple security issues have been found in the Mozilla Firefox web
    browser, which could potentially result in the execution of arbitrary
    code, information disclosure or spoofing.

    For the oldstable distribution (buster), these problems have been fixed
    in version 91.8.0esr-1~deb10u1.

    For the stable distribution (bullseye), these problems have been fixed in version 91.8.0esr-1~deb11u1.

    We recommend that you upgrade your firefox-esr packages.

    At me it apparently has really kept an old unfixed version.
    The message says fixed for oldstable, not mentioning that the fix has
    not yet been achieved for i386 and that it was only applied to amd64.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Friedhelm Waitzmann@21:1/5 to All on Fri Apr 15 05:10:01 2022
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Elmar Stellnberger on Thursday., 2022-04-14T18:51:01+0200:

    Where can I get this from for buster and architecture i386?
    <http://security.debian.org/debian-security/dists/buster/updates/main/binary-i386/Packages.xz>
    does not have it.

    Friedhelm, how have you taken notice about this issue?
    Was the file really not there or do you think you have forgotten to
    type firefox-esr instead of firefox or something the like?

    Yes, for i386 it is really not there:

    $ apt-cache policy firefox-esr
    firefox-esr:
    Candidate: 78.15.0esr-1~deb10u1
    Version table:
    91.8.0esr-1~deb11u1 50
    50 http://apt-cache.zuhause.test:3142/debian-security bullseye-security/main i386 Packages
    78.15.0esr-1~deb11u1 50
    50 http://apt-cache.zuhause.test:3142/debian bullseye/main i386 Packages
    78.15.0esr-1~deb10u1 500
    500 http://apt-cache.zuhause.test:3142/debian-security buster/updates/main i386 Packages
    78.14.0esr-1~deb10u1 500
    500 http://apt-cache.zuhause.test:3142/debian buster/main i386 Packages
    78.12.0esr-1 50
    50 file:/media/root/Debian 11.0.0 i386 1/debian bullseye/main i386 Packages

    On apt-cache.zuhause.test I run an apt-cacher-ng that maps http://apt-cache.zuhause.test:3142/debian to

    http://deb.debian.org/debian/
    http://ftp.de.debian.org/debian/
    http://ftp2.de.debian.org/debian/
    http://ftp.debian.org/debian/

    , which are considered to be equal, and http://apt-cache.zuhause.test:3142/debian-security to

    http://security.debian.org/debian-security http://deb.debian.org/debian-security

    , which are considered to be equal.

    At present I have pinned to priority 50 all package versions
    belonging to any release whose codename matches »bullseye*« with
    a rule in /etc/apt/preferences. When I am ready to upgrade to
    bullseye, I will remove that rule.

    So the newest firefox-esr in buster for i386 is
    78.15.0esr-1~deb10u1, and that is broken.


    Package : firefox-esr
    CVE ID : CVE-2022-1097 CVE-2022-1196 CVE-2022-24713
    CVE-2022-28281 CVE-2022-28282 CVE-2022-28285
    CVE-2022-28286 CVE-2022-28289

    Multiple security issues have been found in the Mozilla
    Firefox web browser,
    […]
    For the oldstable distribution (buster), these problems have
    been fixed in version 91.8.0esr-1~deb10u1.
    […]
    We recommend that you upgrade your firefox-esr packages.

    At me it apparently has really kept an old unfixed version.

    Exactly.

    The message says fixed for oldstable, not mentioning that the fix has
    not yet been achieved for i386 and that it was only applied to amd64.

    Yes, so it is.


    Regards,
    Friedhelm.

    My OpenPGP key:

    - -----BEGIN PGP PUBLIC KEY BLOCK-----

    mQENBFoCvhgBCADnymmMgAzxsUqP9GPSK+QJATL4w/C8KS7ghUdu7TT4mdEfMfgI BteRnqWJvLzlBFlQRBEXQphxfgtAdTAZDdAlcyXkcA19Sb0Z09/oQgPe4vp99Cnp kq2GPOxSk6YQrfs4FF6p4lsQUz0TKONSztZGo4VSyT1G+LpsSxm7Q1YUzpO4j5fy XfPMB/TdhpJbKlE4yVldwVdt4+Gc8oTeohVkZZtVx9bplmaVLaj35HrRTupj75IS tooF5dTVLQVhQYKqDCd2DKiZiUuKt6K9ZtrpmjnWaWRayKmJdJ14R8/Q7VfSyXOx fLb4DNDz4FNUPOvHdXYjhsTz1U6v1kaddMXdABEBAAG0E0ZyaWVkaGVsbSBXYWl0 em1hbm6JAWAEEwEKAEoCGwECHgECF4ALCw0JCgwICwcEAwIIFQoJCAsDAgEFFgMC AQACGQEFCQuP3SgWIQRGyPH+W3hgUPhyflPQtV81ksAM7QUCYbLp7wAKCRDQtV81 ksAM7cr5B/wO1khGTl3dAh46DY2jxe3jTfPvicbQgZQVwOhhP2FPKIFC8dYVCEHk oYQapW47YXufw/Qw71GILfMtZemiUJpHwa/thCPtP3clE53ZqsEdArHDX2ZYm3Ol qDTxMuilQCDfGuatg6MVQ8SlUbhcGIGyr4O4cPeDe0kmUOQhp8wKTXkmhq3Yml5+ 2XRu69TZUNsQh3TPi50hR+RB0YjI+KTBKYSanAYM44Bj6mti6+06UkRVMaFxLVzS BAEyTf/SBaKkJq4cKe+gCzcc/Gg8jrxKVcQRPdUxOlvWUiYT5FYRaFuklgDW4B+g 23FdO6RkE0Z+g/oLeAYSqj/JMfjv77bFtBlmYWNoMjIwNDA4LmZ3bnNwQHhveHku bmV0iQFdBBMBCgBHFiEERsjx/lt4YFD4cn5T0LVfNZLADO0FAmJQFg8CGwEFCQuP 3SgLCw0JCgwICwcEAwIIFQoJCAsDAgEFFgMCAQACHgECF4AACgkQ0LVfNZLADO2V ygf9HQWjolhnGRNWG5845lh2uTrm/5q19+hKwnQHx7HApZia09kXp7QpxTCmSmnq skWto08U/iT1sPqFTOojOZAM6e4zr7kz/VJksJx8lswUkTRyGXqGEQoQ7bZvd6XR Yu0ZKfNNZhvjfPzzwyp+85lWWIaNA0cQyIa6BRzlNhgCbyLhksy4GDkzoBPxhNOp mboohSVOnLjrUbQpfKCDJtAaNps95+4gv2t8JPtyFcZW9qKWFRIdJJvamc3lp4Il JwzXRElB1htSHQb4SA2VN9M6ALdnfZXXT+H8UKKek+joE8Xm15FX83E5pmrE/8lp imVg0s0BAUd0DxVj6zj4SI9yhrkBDQRaAsK/AQgAyBEE1hjgZ6F33GPSkfxsFqsN L5lQrRTQtx5GKPt5UnIKK00TAevGoI8VDftuP6Fpp9kFJ+HSAiW3M+8S70H3UnbW 8AFofSd28AUvnnhP4ATwRcVm35+HYUge4lKiy5bEvDS9bALJqlW9sHBUF+gebrmh 0CgvD0sQSUE4PLAuHFUJG8/fezReXGB2MSVAbu8NXHdlJ6vPr5ERlg7A0JFR9Knx s8PoI/1hd73mwGld9/Xo3xByDbJ7Uejjt3HpNZf9eOq3XPp02dpKsOQEB2QxxPHI TcBH8IBZY78BJHq9UD4g3fD904oIvs38BzvX/WAMO9W0k1ZLfF1zyR0+QXQweQAR AQABiQJEBBgBAgAPAhsCBQJcRWq9BQkU+H0OASnAXSAEGQECAAYFAloCwr8ACgkQ gEIvCiHZTet1zwf/TUmPpwnBgoA6AXILI5R/NvZit30mbExa6byBOK9vEbGS8pSu L/GN5tzTmyJoGbLNc24h8w6FwcoxE0xJSUJKp7nO95NWD/kO5n8alJZN9ph8I2yt Cl3dhzZKw8+j+WBwTrKLdDP5lfarI0gz6+N1UtFH4U+tUCq56DQqu46xyTS5ASeM iO/8Ykej9LiObZv9QYwnKkhM8y+Dw9dkPfIsqt47uE4j4czpJ4qv8236oV/luR44 8cCud5G7ZGxBj6DSnitZM2lbq5yTlIZ3EEvu/I9dE/vsPaWQmGeo6S03FJ8+S6Xn eP8mgYWl9YGJTjDvUg3FU9fXfHzCuFtZ/1YZvAkQ0LVfNZLADO2zEggAi3myJcVA yiftlZSkTrId9LNeQtXCw7tkJcuaGIC/FWJQhVofcp2CuEAm26w9xRN39Tp7pi2r fta/xykj0iYNjmqgi7MWK6pZOY/LCTEOMfYiWX4LCJ89f51y2TTmWwgfWXxFVe8y lyRMC1N2CXEd5xsEKA1ZI5vF3ikjVkMBAtLGiSxcyBi8YbcDFG4/fTBNpeEvXZ6n CusDDYCArwFiQi4mRtDbZXBZIBVE+jwYlzw0bz3EeqkPFMJ/pvuWeQ5R9LSuVYhh aVieqoLXmK6uwQLoJOFx67KX+BoEPpkVa/FmDhfpguQrKz5/Eq1Lhy8P28EAhLSG Ar1XuxedRos/pLkBDQRaAsFpAQgAm4sZiVbFI6YpR3yDFpe7qOkkWmlk+7MT8cAa j5Ltm+mXqf7ZHDNeX9mzMNBZeoUBCztp0n/N0Iu5T7MmEJV/rrJa0N8ezjY9kDTX xUmLRmXTM/AM7Jg6dsIOf/lrd2TAagUkf/nYS9Sxx7/MvWESis3uYw8aqpuXjS0t FgaG3umvTfvgI2SamuZTkdt9KmoqKCFcf5qjNk7PeY0REVYUp0/mfyPDo7s33yOm P0x9wy6zeZ4OKAsSETvARj8WafUT7vikVuZEtfiLolT741y2VtvyBICooLsVZ6Pf MMle4newVhbZeJAjUTdxoE4T+B1vMICsbNw2/zsYtM/9KKvWpwARAQABiQElBBgB AgAPAhsMBQJcRWqNBQkU+H5mAAoJENC1XzWSwAztix8IAN+/SZI+fr6AkLuC0X+0 FxpsSD3n89XQja+nTrVTODu2c1BDi0bXOMwcOyRqnnZ1F/tKieVQsfpvZoumF7Wi fs9O3Mlt9Tw1b+g7tfnTj3a9GP6AiYzt/Zde2YGhbZ+65AOwka8DegWm+R6JuLds y6oERH1BzGytG/c6pKY17XiMnXTdjwvN+YuSJ89eqA90KzoIOVCx9kWVagxzWh6u WioiuAStwrUmZ+KOFhQbmXtEO+fUHf+G9J5DtlKFLHjz4Qy88z0jdGvE0Yf3r46q d8mzOSlOX9N2LWTR+bFuN9DYeoQmDyibEM5W9dNH4Fn8F8wKyMgX33bz/ougs6+m
    re0=
    =Dl6i
    - -----END PGP PUBLIC KEY BLOCK-----
    -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEEzf8af16GP0HJOpBzgEIvCiHZTesFAmJY2pQACgkQgEIvCiHZ TeubLQf/RnOFOBnPZBe2BsKMIcUEILq2sfbGSejB4HuV0qEiJkiywhVqkFtWvjaj 54FWY9WEwJktC/MfOFLUy2/aqr4oN95hnx2+IVIeyZB7VLuL57rT1B36Q9tLqIo8 9TDoshfTc9spLujXsZmAt9Pc0yiz88dilExkhuocAUNgUAGt6hvZ6wmZm7UI4jtn aV1vf5xTi5YpbIBuyd7Vu+sToCANAZJNiNWwptTtVSiqnpo5CvJrrnNJqzI8CMki 7tL8CGqlaQApEtm3kE6um/Kg+7cH5SZcPyioTRp1ibe+7uBJNzyaMr03EwkACuN9 LzsBlrbMOkqZE+o6IvZaP2rHfJKW6w==
    =MIKv
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elmar Stellnberger@21:1/5 to Elmar Stellnberger on Fri Apr 15 18:40:01 2022
    On Fri, Apr 15, 2022 at 04:52:55PM +0200, Elmar Stellnberger wrote:
    ...
    exist. It truely is this g++ bug that prevents Firefox and any
    Qt programs from building under Buster/i586. I have noted that
    there are also some amd64 targets on the OBS that expose the
    exact same g++ bug. My question would be on why the fixup/patch
    from amd64 can not be used for g++/i386 on Debian?

    May I see what has fixed the issue for amd64 on Debian10 /
    Buster? That may greatly facilitate the development for a patch
    on i386. I believe the issue should really be fixed.

    Elmar

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elmar Stellnberger@21:1/5 to Elmar Stellnberger on Sat Apr 16 16:10:01 2022
    Maybe the Qt/moc and the gcc/Firefox bugs are unrelated. I
    have not heard anything about it here yet. I have found a page
    that tells the moc error can be resolved by upgrading from Qt
    5.4.1 -> 5.4.2.

    https://topic.alibabacloud.com/a/usrincludec641bitsstl_relops67parse-error-at-std_1_31_30235235.html

    It would be a general question of mine regarding both bugs why
    you do not simply up/downgrade to the last known good version.
    The i386 target would work well including the required security
    updates and it would not be necessary to develop a patch for
    these issues.
    Given that this should not be possible for some reason, please
    share your knowledge about these bugs, so that people like me
    can try to find a fix.

    Elmar


    On Fri, Apr 15, 2022 at 06:37:33PM +0200, Elmar Stellnberger wrote:
    On Fri, Apr 15, 2022 at 04:52:55PM +0200, Elmar Stellnberger wrote:
    ...
    exist. It truely is this g++ bug that prevents Firefox and any
    Qt programs from building under Buster/i586. I have noted that
    there are also some amd64 targets on the OBS that expose the
    exact same g++ bug. My question would be on why the fixup/patch
    from amd64 can not be used for g++/i386 on Debian?

    May I see what has fixed the issue for amd64 on Debian10 /
    Buster? That may greatly facilitate the development for a patch
    on i386. I believe the issue should really be fixed.

    Elmar


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Odo Poppinger@21:1/5 to Elmar Stellnberger on Sat Apr 16 17:30:01 2022
    Why not?

    On 16.04.22 16:05, Elmar Stellnberger wrote:
    Given that this should not be possible for some reason, please
    share your knowledge about these bugs, so that people like me
    can try to find a fix.

    Elmar


    On 11.04.22 23:57, Moritz Muehlenhoff wrote:
    It is possible; if someone tracks down the respective GCC change and backports
    it to GCC 8 in Buster or alternatively lands a patch in the ESR91 branch which changes the code to no longer trigger the ICE, that would fix it.

    But realistically the number of people who actively care about i386 support is
    really, really small so I wouldn't count on it...

    Cheers,
    Moritz

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elmar Stellnberger@21:1/5 to Elmar Stellnberger on Sun Apr 17 18:10:01 2022
    Likely it is possible to comment out the tournament checks after
    compilation (which did not succeed to find this error any way) in
    debian/rules; I would do it like this:

    check:

    check22: $(check_stamp)
    $(check_stamp): $(build_stamp)
    $(MAKE) -f debian/rules2 $@

    (here I have renamed check into check22 and created a new empty check goal) That should save 80% of the compilation time.

    Elmar

    On 17.04.22 17:46, Elmar Stellnberger wrote:
      I have now downloaded the source package and examined the backtrace
    of building Firefox and examined all the differences between gcc 8.3.0-1 (known bad from Debian10) and gcc 9.2.0 with gcc 9.2.1 being known to be
    good for moc/Qt5 from Ubuntu 19.10. There was only one difference I
    found along the backtrace for gcc and I have documented this in the
    following gcc/g++ bug report. You can also download the patch from here:
      https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105293

    I have rebuilt with the posted patch and the output has shown me that
    all package files must have been created successfully:

    Build Dependencies:
    Desired=Unknown/Install/Remove/Purge/Hold
    | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend

    |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
    ||/ Name                      Version                Architecture
    Description +++-=========================-======================-============-===============================================================================

    ii  binutils                  2.31.1-16              i386         GNU
    assembler, linker and binary utilities
    ii  binutils-common:i386      2.31.1-16              i386         Common
    files for the GNU assembler, linker and binary utilities
    ii  binutils-hppa64-linux-gnu 2.31.1-16              i386         GNU
    assembler, linker and binary utilities targeted for hppa64-linux
    ii  binutils-i686-linux-gnu   2.31.1-16              i386         GNU
    binary utilities, for i686-linux-gnu target
    ii  g++-8                     8.3.0-6                i386         GNU
    C++ compiler
    ii  g++-8-dbgsym              8.3.0-6                i386         debug
    symbols for g++-8
    ii  g++-8-multilib            8.3.0-6                i386         GNU
    C++ compiler (multilib support)
    ii  g++-multilib              4:8.3.0-1              i386         GNU
    C++ compiler (multilib files)
    ii  libc6:i386                2.28-10+deb10u1        i386         GNU C
    Library: Shared libraries
    ii  libgmp-dev:i386           2:6.1.2+dfsg-4+deb10u1 i386 Multiprecision
    arithmetic library developers tools
    ii  libisl-dev:i386           0.20-2                 i386 manipulating
    sets and relations of integer points bounded by linear constraints
    ii  libmpc-dev:i386           1.1.0-1                i386 multiple
    precision complex floating-point library development package
    ii  libmpfr-dev:i386          4.0.2-1                i386 multiple
    precision floating-point computation developers tools


    (from gcc-bug:, this is terror by Western secret services, as also
    referenced by elstel.org/DualSat) "I have looked into the same directory
    as before but unfortunately I found not a single .deb there and nowhere
    else under /usr/src. The files can only have been deleted like the ssh
    user from /etc/passwd at my nslu2 machine. Another time I found out
    about a chmod -x /etc/init.d/sshd as I suddenly could not connect to my
    nslu2 via ssh any more. This looks very similar as what I have
    experienced with arm-linux-gnueabihf-ld when the program did neither
    produce an error message, an !=0 return value and no output file as
    given with -o txtfmt."
      If you know programs like gcc or the linker ld, then you know they
    will always produce an error message if something fails. Even if there
    was a bug in ld to display no error it would have returned a non-zero
    exit status. Anyone who has worked with tools like gcc or ld/collect2
    knows that. I have really searched for a txtfmt/a.out everywhere possible.

      I am quite sure that the posted patch would resolve the issue. I
    would appreciate it very much if someone was ready to compile that with
    a Debian10/i386 chroot:

    as root:
    ; debootstrap --arch i386 buster /dst/dbuster-i386
    ; xchroot /dst/dbuster-i386
    ; ... install build-essential apt-src locales-all etc.
    ; cd /usr/src
    ; apt-src update
    ; apt-src install gcc-8

    Compiling may need more than a day; however you may hibernate in
    between. Make sure you have copied the patch into
    gcc-8-8.3.0/debian/patches/ and check that file has been patched some
    good minutes after compilation has started:

    grep "chkp_reset_rtl_bounds ();" gcc-8-8.3.0/src/gcc/cfgexpand.c || echo ok

    before it should not echo ok but the line with chkp_reset_rtl_bounds

    invoke the build inside the gcc-8-8.3.0 directory:
      dpkg-buildpackage -b -uc -us [-nc] 2>&1 | tee compile-gcc.msg
    // -b ... build binary
    // -uc -us ... do not sign (I use -kestellnb@elstel.org, see gpg
    --list-keys)

      You can stop as soon as it has created the .deb packages. Grep for a
    line like "ii.*libgmp-dev:i386" in compile-gcc.msg to find that out. Do
    not forget to shield the + characters of g++ i.e. grep
    "g[+][+]-8-multilib "

      It will be of great help if anyone decides to do so!
    Remember it should resolve several dependent bugs in Buster/i586 and
    also distributions of similar time.

    Regards,
    Elmar




    On 16.04.22 17:20, Odo Poppinger wrote:
    Why not?

    On 16.04.22 16:05, Elmar Stellnberger wrote:
    ;    Given that this should not be possible for some reason, please
    share your knowledge about these bugs, so that people like me
    can try to find a fix.
    ;
    Elmar


    On 11.04.22 23:57, Moritz Muehlenhoff wrote:
    It is possible; if someone tracks down the respective GCC change and
    backports
    it to GCC 8 in Buster or alternatively lands a patch in the ESR91 branch >>> which changes the code to no longer trigger the ICE, that would fix it.

    But realistically the number of people who actively care about i386
    support is
    really, really small so I wouldn't count on it...

    Cheers,
             Moritz


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elmar Stellnberger@21:1/5 to Odo Poppinger on Sun Apr 17 17:50:02 2022
    I have now downloaded the source package and examined the backtrace
    of building Firefox and examined all the differences between gcc 8.3.0-1
    (known bad from Debian10) and gcc 9.2.0 with gcc 9.2.1 being known to be
    good for moc/Qt5 from Ubuntu 19.10. There was only one difference I
    found along the backtrace for gcc and I have documented this in the
    following gcc/g++ bug report. You can also download the patch from here:
    https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105293

    I have rebuilt with the posted patch and the output has shown me that
    all package files must have been created successfully:

    Build Dependencies:
    Desired=Unknown/Install/Remove/Purge/Hold
    |
    Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
    |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
    ||/ Name Version Architecture
    Description +++-=========================-======================-============-===============================================================================
    ii binutils 2.31.1-16 i386 GNU assembler, linker and binary utilities
    ii binutils-common:i386 2.31.1-16 i386 Common
    files for the GNU assembler, linker and binary utilities
    ii binutils-hppa64-linux-gnu 2.31.1-16 i386 GNU assembler, linker and binary utilities targeted for hppa64-linux
    ii binutils-i686-linux-gnu 2.31.1-16 i386 GNU
    binary utilities, for i686-linux-gnu target
    ii g++-8 8.3.0-6 i386 GNU
    C++ compiler
    ii g++-8-dbgsym 8.3.0-6 i386 debug
    symbols for g++-8
    ii g++-8-multilib 8.3.0-6 i386 GNU
    C++ compiler (multilib support)
    ii g++-multilib 4:8.3.0-1 i386 GNU
    C++ compiler (multilib files)
    ii libc6:i386 2.28-10+deb10u1 i386 GNU C Library: Shared libraries
    ii libgmp-dev:i386 2:6.1.2+dfsg-4+deb10u1 i386
    Multiprecision arithmetic library developers tools
    ii libisl-dev:i386 0.20-2 i386
    manipulating sets and relations of integer points bounded by linear
    constraints
    ii libmpc-dev:i386 1.1.0-1 i386
    multiple precision complex floating-point library development package
    ii libmpfr-dev:i386 4.0.2-1 i386
    multiple precision floating-point computation developers tools


    (from gcc-bug:, this is terror by Western secret services, as also
    referenced by elstel.org/DualSat) "I have looked into the same directory
    as before but unfortunately I found not a single .deb there and nowhere
    else under /usr/src. The files can only have been deleted like the ssh
    user from /etc/passwd at my nslu2 machine. Another time I found out
    about a chmod -x /etc/init.d/sshd as I suddenly could not connect to my
    nslu2 via ssh any more. This looks very similar as what I have
    experienced with arm-linux-gnueabihf-ld when the program did neither
    produce an error message, an !=0 return value and no output file as
    given with -o txtfmt."
    If you know programs like gcc or the linker ld, then you know they
    will always produce an error message if something fails. Even if there
    was a bug in ld to display no error it would have returned a non-zero
    exit status. Anyone who has worked with tools like gcc or ld/collect2
    knows that. I have really searched for a txtfmt/a.out everywhere possible.

    I am quite sure that the posted patch would resolve the issue. I
    would appreciate it very much if someone was ready to compile that with
    a Debian10/i386 chroot:

    as root:
    > debootstrap --arch i386 buster /dst/dbuster-i386
    > xchroot /dst/dbuster-i386
    > ... install build-essential apt-src locales-all etc.
    > cd /usr/src
    > apt-src update
    > apt-src install gcc-8

    Compiling may need more than a day; however you may hibernate in
    between. Make sure you have copied the patch into
    gcc-8-8.3.0/debian/patches/ and check that file has been patched some
    good minutes after compilation has started:

    grep "chkp_reset_rtl_bounds ();" gcc-8-8.3.0/src/gcc/cfgexpand.c || echo ok

    before it should not echo ok but the line with chkp_reset_rtl_bounds

    invoke the build inside the gcc-8-8.3.0 directory:
    dpkg-buildpackage -b -uc -us [-nc] 2>&1 | tee compile-gcc.msg
    // -b ... build binary
    // -uc -us ... do not sign (I use -kestellnb@elstel.org, see gpg
    --list-keys)

    You can stop as soon as it has created the .deb packages. Grep for a
    line like "ii.*libgmp-dev:i386" in compile-gcc.msg to find that out. Do
    not forget to shield the + characters of g++ i.e. grep "g[+][+]-8-multilib "

    It will be of great help if anyone decides to do so!
    Remember it should resolve several dependent bugs in Buster/i586 and
    also distributions of similar time.

    Regards,
    Elmar




    On 16.04.22 17:20, Odo Poppinger wrote:
    Why not?

    On 16.04.22 16:05, Elmar Stellnberger wrote:
        Given that this should not be possible for some reason, please
    share your knowledge about these bugs, so that people like me
    can try to find a fix.

    Elmar


    On 11.04.22 23:57, Moritz Muehlenhoff wrote:
    It is possible; if someone tracks down the respective GCC change and
    backports
    it to GCC 8 in Buster or alternatively lands a patch in the ESR91 branch
    which changes the code to no longer trigger the ICE, that would fix it.

    But realistically the number of people who actively care about i386
    support is
    really, really small so I wouldn't count on it...

    Cheers,
             Moritz


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elmar Stellnberger@21:1/5 to Elmar Stellnberger on Sun Apr 17 18:20:01 2022
    Just make sure you comment out the tests. It will greatly speed up compilation and one of these tests was even hanging two times:
    ./a.out -test.short -test.timeout=240s

    It is a known Debian Bug that the Go tests (a programming language)
    fail with with gcc-8. If not you would have to connect with gdb to the
    make process, attach to its pid and close file descriptor three to
    continue. Nonetheless the necessary packages listed in my last email get created before that.

    On 17.04.22 18:06, Elmar Stellnberger wrote:
    Likely it is possible to comment out the tournament checks after
    compilation (which did not succeed to find this error any way) in debian/rules; I would do it like this:

    check:

    check22: $(check_stamp)
    $(check_stamp): $(build_stamp)
        $(MAKE) -f debian/rules2 $@

    (here I have renamed check into check22 and created a new empty check goal) That should save 80% of the compilation time.

    Elmar

    On 17.04.22 17:46, Elmar Stellnberger wrote:
       I have now downloaded the source package and examined the backtrace
    of building Firefox and examined all the differences between gcc
    8.3.0-1 (known bad from Debian10) and gcc 9.2.0 with gcc 9.2.1 being
    known to be good for moc/Qt5 from Ubuntu 19.10. There was only one
    difference I found along the backtrace for gcc and I have documented
    this in the following gcc/g++ bug report. You can also download the
    patch from here:
       https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105293

    I have rebuilt with the posted patch and the output has shown me that
    all package files must have been created successfully:

    Build Dependencies:
    Desired=Unknown/Install/Remove/Purge/Hold
    |
    Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend >>
    |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
    ||/ Name                      Version                Architecture
    Description
    +++-=========================-======================-============-===============================================================================

    ii  binutils                  2.31.1-16              i386         GNU
    assembler, linker and binary utilities
    ii  binutils-common:i386      2.31.1-16              i386 >> Common files for the GNU assembler, linker and binary utilities
    ii  binutils-hppa64-linux-gnu 2.31.1-16              i386         GNU
    assembler, linker and binary utilities targeted for hppa64-linux
    ii  binutils-i686-linux-gnu   2.31.1-16              i386         GNU
    binary utilities, for i686-linux-gnu target
    ii  g++-8                     8.3.0-6                i386         GNU
    C++ compiler
    ii  g++-8-dbgsym              8.3.0-6                i386
    debug symbols for g++-8
    ii  g++-8-multilib            8.3.0-6                i386         GNU
    C++ compiler (multilib support)
    ii  g++-multilib              4:8.3.0-1              i386         GNU
    C++ compiler (multilib files)
    ii  libc6:i386                2.28-10+deb10u1        i386         GNU
    C Library: Shared libraries
    ii  libgmp-dev:i386           2:6.1.2+dfsg-4+deb10u1 i386
    Multiprecision arithmetic library developers tools
    ii  libisl-dev:i386           0.20-2                 i386 manipulating
    sets and relations of integer points bounded by linear constraints
    ii  libmpc-dev:i386           1.1.0-1                i386 multiple
    precision complex floating-point library development package
    ii  libmpfr-dev:i386          4.0.2-1                i386 multiple
    precision floating-point computation developers tools


    (from gcc-bug:, this is terror by Western secret services, as also
    referenced by elstel.org/DualSat) "I have looked into the same
    directory as before but unfortunately I found not a single .deb there
    and nowhere else under /usr/src. The files can only have been deleted
    like the ssh user from /etc/passwd at my nslu2 machine. Another time I
    found out about a chmod -x /etc/init.d/sshd as I suddenly could not
    connect to my nslu2 via ssh any more. This looks very similar as what
    I have experienced with arm-linux-gnueabihf-ld when the program did
    neither produce an error message, an !=0 return value and no output
    file as given with -o txtfmt."
       If you know programs like gcc or the linker ld, then you know they
    will always produce an error message if something fails. Even if there
    was a bug in ld to display no error it would have returned a non-zero
    exit status. Anyone who has worked with tools like gcc or ld/collect2
    knows that. I have really searched for a txtfmt/a.out everywhere
    possible.

       I am quite sure that the posted patch would resolve the issue. I
    would appreciate it very much if someone was ready to compile that
    with a Debian10/i386 chroot:

    as root:
      > debootstrap --arch i386 buster /dst/dbuster-i386
      > xchroot /dst/dbuster-i386
      > ... install build-essential apt-src locales-all etc.
      > cd /usr/src
      > apt-src update
      > apt-src install gcc-8

    Compiling may need more than a day; however you may hibernate in
    between. Make sure you have copied the patch into
    gcc-8-8.3.0/debian/patches/ and check that file has been patched some
    good minutes after compilation has started:

    grep "chkp_reset_rtl_bounds ();" gcc-8-8.3.0/src/gcc/cfgexpand.c ||
    echo ok

    before it should not echo ok but the line with chkp_reset_rtl_bounds

    invoke the build inside the gcc-8-8.3.0 directory:
       dpkg-buildpackage -b -uc -us [-nc] 2>&1 | tee compile-gcc.msg
    // -b ... build binary
    // -uc -us ... do not sign (I use -kestellnb@elstel.org, see gpg
    --list-keys)

       You can stop as soon as it has created the .deb packages. Grep for
    a line like "ii.*libgmp-dev:i386" in compile-gcc.msg to find that out.
    Do not forget to shield the + characters of g++ i.e. grep
    "g[+][+]-8-multilib "

       It will be of great help if anyone decides to do so!
    Remember it should resolve several dependent bugs in Buster/i586 and
    also distributions of similar time.

    Regards,
    Elmar




    On 16.04.22 17:20, Odo Poppinger wrote:
    Why not?

    On 16.04.22 16:05, Elmar Stellnberger wrote:
    ;    Given that this should not be possible for some reason, please >>>  > share your knowledge about these bugs, so that people like me
    can try to find a fix.
    ;
    Elmar


    On 11.04.22 23:57, Moritz Muehlenhoff wrote:
    It is possible; if someone tracks down the respective GCC change and
    backports
    it to GCC 8 in Buster or alternatively lands a patch in the ESR91
    branch
    which changes the code to no longer trigger the ICE, that would fix it. >>>>
    But realistically the number of people who actively care about i386
    support is
    really, really small so I wouldn't count on it...

    Cheers,
             Moritz



    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elmar Stellnberger@21:1/5 to Elmar Stellnberger on Mon Apr 18 19:50:01 2022
    The patch from yesterday could be tested by manually shipping the
    executable. Today I have developed another patch (since the first one
    did not resolve it), one that compares against the backtrace with Debian
    11 which is known to have a working gcc. The assumption that the Firefox
    and Qt5/moc bug both have gcc as a cause is likely not valid as Firefox
    stopped with an internal compiler error while moc may produce spurious
    output for some totally different reason.
    You can find the new patch here:

    https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105293

    However this time absolutely no chance to test it by me! Compilation
    did not work though only one line of source had been moved up and even a
    safety copy of the old g++ got deleted at me (and I have not done that).

    On 17.04.22 17:46, Elmar Stellnberger wrote:
      I have now downloaded the source package and examined the backtrace
    of building Firefox and examined all the differences between gcc 8.3.0-1 (known bad from Debian10) and gcc 9.2.0 with gcc 9.2.1 being known to be
    good for moc/Qt5 from Ubuntu 19.10. There was only one difference I
    found along the backtrace for gcc and I have documented this in the
    following gcc/g++ bug report. You can also download the patch from here:
      https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105293

    I have rebuilt with the posted patch and the output has shown me that
    all package files must have been created successfully:

    Build Dependencies:
    Desired=Unknown/Install/Remove/Purge/Hold
    | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend

    |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
    ||/ Name                      Version                Architecture
    Description +++-=========================-======================-============-===============================================================================

    ii  binutils                  2.31.1-16              i386         GNU
    assembler, linker and binary utilities
    ii  binutils-common:i386      2.31.1-16              i386         Common
    files for the GNU assembler, linker and binary utilities
    ii  binutils-hppa64-linux-gnu 2.31.1-16              i386         GNU
    assembler, linker and binary utilities targeted for hppa64-linux
    ii  binutils-i686-linux-gnu   2.31.1-16              i386         GNU
    binary utilities, for i686-linux-gnu target
    ii  g++-8                     8.3.0-6                i386         GNU
    C++ compiler
    ii  g++-8-dbgsym              8.3.0-6                i386         debug
    symbols for g++-8
    ii  g++-8-multilib            8.3.0-6                i386         GNU
    C++ compiler (multilib support)
    ii  g++-multilib              4:8.3.0-1              i386         GNU
    C++ compiler (multilib files)
    ii  libc6:i386                2.28-10+deb10u1        i386         GNU C
    Library: Shared libraries
    ii  libgmp-dev:i386           2:6.1.2+dfsg-4+deb10u1 i386 Multiprecision
    arithmetic library developers tools
    ii  libisl-dev:i386           0.20-2                 i386 manipulating
    sets and relations of integer points bounded by linear constraints
    ii  libmpc-dev:i386           1.1.0-1                i386 multiple
    precision complex floating-point library development package
    ii  libmpfr-dev:i386          4.0.2-1                i386 multiple
    precision floating-point computation developers tools


    (from gcc-bug:, this is terror by Western secret services, as also
    referenced by elstel.org/DualSat) "I have looked into the same directory
    as before but unfortunately I found not a single .deb there and nowhere
    else under /usr/src. The files can only have been deleted like the ssh
    user from /etc/passwd at my nslu2 machine. Another time I found out
    about a chmod -x /etc/init.d/sshd as I suddenly could not connect to my
    nslu2 via ssh any more. This looks very similar as what I have
    experienced with arm-linux-gnueabihf-ld when the program did neither
    produce an error message, an !=0 return value and no output file as
    given with -o txtfmt."
      If you know programs like gcc or the linker ld, then you know they
    will always produce an error message if something fails. Even if there
    was a bug in ld to display no error it would have returned a non-zero
    exit status. Anyone who has worked with tools like gcc or ld/collect2
    knows that. I have really searched for a txtfmt/a.out everywhere possible.

      I am quite sure that the posted patch would resolve the issue. I
    would appreciate it very much if someone was ready to compile that with
    a Debian10/i386 chroot:

    as root:
    ; debootstrap --arch i386 buster /dst/dbuster-i386
    ; xchroot /dst/dbuster-i386
    ; ... install build-essential apt-src locales-all etc.
    ; cd /usr/src
    ; apt-src update
    ; apt-src install gcc-8

    Compiling may need more than a day; however you may hibernate in
    between. Make sure you have copied the patch into
    gcc-8-8.3.0/debian/patches/ and check that file has been patched some
    good minutes after compilation has started:

    grep "chkp_reset_rtl_bounds ();" gcc-8-8.3.0/src/gcc/cfgexpand.c || echo ok

    before it should not echo ok but the line with chkp_reset_rtl_bounds

    invoke the build inside the gcc-8-8.3.0 directory:
      dpkg-buildpackage -b -uc -us [-nc] 2>&1 | tee compile-gcc.msg
    // -b ... build binary
    // -uc -us ... do not sign (I use -kestellnb@elstel.org, see gpg
    --list-keys)

      You can stop as soon as it has created the .deb packages. Grep for a
    line like "ii.*libgmp-dev:i386" in compile-gcc.msg to find that out. Do
    not forget to shield the + characters of g++ i.e. grep
    "g[+][+]-8-multilib "

      It will be of great help if anyone decides to do so!
    Remember it should resolve several dependent bugs in Buster/i586 and
    also distributions of similar time.

    Regards,
    Elmar




    On 16.04.22 17:20, Odo Poppinger wrote:
    Why not?

    On 16.04.22 16:05, Elmar Stellnberger wrote:
    ;    Given that this should not be possible for some reason, please
    share your knowledge about these bugs, so that people like me
    can try to find a fix.
    ;
    Elmar


    On 11.04.22 23:57, Moritz Muehlenhoff wrote:
    It is possible; if someone tracks down the respective GCC change and
    backports
    it to GCC 8 in Buster or alternatively lands a patch in the ESR91 branch >>> which changes the code to no longer trigger the ICE, that would fix it.

    But realistically the number of people who actively care about i386
    support is
    really, really small so I wouldn't count on it...

    Cheers,
             Moritz


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elmar Stellnberger@21:1/5 to Elmar Stellnberger on Tue Apr 19 12:20:01 2022
    Today I have received response on my g++ bug report at gcc.gnu.org.
    Gcc 8.3.0 as used in Debian 10 is no longer supported as the 8 branch
    has a newer version which is gcc 8.5. Why do Debian maintainers not
    update gcc, if there is a known bug that prevents updated sources like firefox-esr-91.8.0 from building?

    Elmar

    On 18.04.22 19:44, Elmar Stellnberger wrote:
     The patch from yesterday could be tested by manually shipping the executable. Today I have developed another patch (since the first one
    did not resolve it), one that compares against the backtrace with Debian
    11 which is known to have a working gcc. The assumption that the Firefox
    and Qt5/moc bug both have gcc as a cause is likely not valid as Firefox stopped with an internal compiler error while moc may produce spurious
    output for some totally different reason.
      You can find the new patch here:

    https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105293

      However this time absolutely no chance to test it by me! Compilation
    did not work though only one line of source had been moved up and even a safety copy of the old g++ got deleted at me (and I have not done that).

    On 17.04.22 17:46, Elmar Stellnberger wrote:
       I have now downloaded the source package and examined the backtrace
    of building Firefox and examined all the differences between gcc
    8.3.0-1 (known bad from Debian10) and gcc 9.2.0 with gcc 9.2.1 being
    known to be good for moc/Qt5 from Ubuntu 19.10. There was only one
    difference I found along the backtrace for gcc and I have documented
    this in the following gcc/g++ bug report. You can also download the
    patch from here:
       https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105293

    I have rebuilt with the posted patch and the output has shown me that
    all package files must have been created successfully:

    Build Dependencies:
    Desired=Unknown/Install/Remove/Purge/Hold
    |
    Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend >>
    |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
    ||/ Name                      Version                Architecture
    Description
    +++-=========================-======================-============-===============================================================================

    ii  binutils                  2.31.1-16              i386         GNU
    assembler, linker and binary utilities
    ii  binutils-common:i386      2.31.1-16              i386 >> Common files for the GNU assembler, linker and binary utilities
    ii  binutils-hppa64-linux-gnu 2.31.1-16              i386         GNU
    assembler, linker and binary utilities targeted for hppa64-linux
    ii  binutils-i686-linux-gnu   2.31.1-16              i386         GNU
    binary utilities, for i686-linux-gnu target
    ii  g++-8                     8.3.0-6                i386         GNU
    C++ compiler
    ii  g++-8-dbgsym              8.3.0-6                i386
    debug symbols for g++-8
    ii  g++-8-multilib            8.3.0-6                i386         GNU
    C++ compiler (multilib support)
    ii  g++-multilib              4:8.3.0-1              i386         GNU
    C++ compiler (multilib files)
    ii  libc6:i386                2.28-10+deb10u1        i386         GNU
    C Library: Shared libraries
    ii  libgmp-dev:i386           2:6.1.2+dfsg-4+deb10u1 i386
    Multiprecision arithmetic library developers tools
    ii  libisl-dev:i386           0.20-2                 i386 manipulating
    sets and relations of integer points bounded by linear constraints
    ii  libmpc-dev:i386           1.1.0-1                i386 multiple
    precision complex floating-point library development package
    ii  libmpfr-dev:i386          4.0.2-1                i386 multiple
    precision floating-point computation developers tools


    (from gcc-bug:, this is terror by Western secret services, as also
    referenced by elstel.org/DualSat) "I have looked into the same
    directory as before but unfortunately I found not a single .deb there
    and nowhere else under /usr/src. The files can only have been deleted
    like the ssh user from /etc/passwd at my nslu2 machine. Another time I
    found out about a chmod -x /etc/init.d/sshd as I suddenly could not
    connect to my nslu2 via ssh any more. This looks very similar as what
    I have experienced with arm-linux-gnueabihf-ld when the program did
    neither produce an error message, an !=0 return value and no output
    file as given with -o txtfmt."
       If you know programs like gcc or the linker ld, then you know they
    will always produce an error message if something fails. Even if there
    was a bug in ld to display no error it would have returned a non-zero
    exit status. Anyone who has worked with tools like gcc or ld/collect2
    knows that. I have really searched for a txtfmt/a.out everywhere
    possible.

       I am quite sure that the posted patch would resolve the issue. I
    would appreciate it very much if someone was ready to compile that
    with a Debian10/i386 chroot:

    as root:
      > debootstrap --arch i386 buster /dst/dbuster-i386
      > xchroot /dst/dbuster-i386
      > ... install build-essential apt-src locales-all etc.
      > cd /usr/src
      > apt-src update
      > apt-src install gcc-8

    Compiling may need more than a day; however you may hibernate in
    between. Make sure you have copied the patch into
    gcc-8-8.3.0/debian/patches/ and check that file has been patched some
    good minutes after compilation has started:

    grep "chkp_reset_rtl_bounds ();" gcc-8-8.3.0/src/gcc/cfgexpand.c ||
    echo ok

    before it should not echo ok but the line with chkp_reset_rtl_bounds

    invoke the build inside the gcc-8-8.3.0 directory:
       dpkg-buildpackage -b -uc -us [-nc] 2>&1 | tee compile-gcc.msg
    // -b ... build binary
    // -uc -us ... do not sign (I use -kestellnb@elstel.org, see gpg
    --list-keys)

       You can stop as soon as it has created the .deb packages. Grep for
    a line like "ii.*libgmp-dev:i386" in compile-gcc.msg to find that out.
    Do not forget to shield the + characters of g++ i.e. grep
    "g[+][+]-8-multilib "

       It will be of great help if anyone decides to do so!
    Remember it should resolve several dependent bugs in Buster/i586 and
    also distributions of similar time.

    Regards,
    Elmar




    On 16.04.22 17:20, Odo Poppinger wrote:
    Why not?

    On 16.04.22 16:05, Elmar Stellnberger wrote:
    ;    Given that this should not be possible for some reason, please >>>  > share your knowledge about these bugs, so that people like me
    can try to find a fix.
    ;
    Elmar


    On 11.04.22 23:57, Moritz Muehlenhoff wrote:
    It is possible; if someone tracks down the respective GCC change and
    backports
    it to GCC 8 in Buster or alternatively lands a patch in the ESR91
    branch
    which changes the code to no longer trigger the ICE, that would fix it. >>>>
    But realistically the number of people who actively care about i386
    support is
    really, really small so I wouldn't count on it...

    Cheers,
             Moritz


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elmar Stellnberger@21:1/5 to All on Sat May 7 15:50:02 2022
    Am 19.04.22 um 12:15 schrieb Elmar Stellnberger:
      Today I have received response on my g++ bug report at gcc.gnu.org.
    Gcc 8.3.0 as used in Debian 10 is no longer supported as the 8 branch
    has a newer version which is gcc 8.5. Why do Debian maintainers not
    update gcc, if there is a known bug that prevents updated sources like firefox-esr-91.8.0 from building?

    As I am still interested in a resolution of this gcc/g++ bug I have
    looked for updates on buster/i386. In deed there is one:

    Automatic updating did not seem to work:

    apt-get upgrade
    Paketlisten werden gelesen... Fertig
    Abhängigkeitsbaum wird aufgebaut.
    Statusinformationen werden eingelesen.... Fertig
    Paketaktualisierung (Upgrade) wird berechnet... Fertig
    Die folgenden Pakete wurden automatisch installiert und werden nicht
    mehr benötigt:
    libstd-rust-1.41 libstd-rust-dev
    Verwenden Sie »apt autoremove«, um sie zu entfernen.
    Die folgenden Pakete werden aktualisiert (Upgrade):
    g++-8 gcc-8 libstdc++-8-dev libstdc++6-8-dbg
    4 aktualisiert, 0 neu installiert, 0 zu entfernen und 0 nicht aktualisiert.
    Es müssen noch 5.600 kB von 26,5 MB an Archiven heruntergeladen werden.
    Nach dieser Operation werden 13,3 kB Plattenplatz zusätzlich benutzt.
    Möchten Sie fortfahren? [J/n] J
    Holen:1 http://deb.debian.org/debian buster/main i386 libstdc++6-8-dbg
    i386 8.3.0-6 [5.600 kB]
    Es wurden 5.600 kB in 6 s geholt (930 kB/s).


    (Lese Datenbank ... 71264 Dateien und Verzeichnisse sind derzeit
    installiert.)
    Vorbereitung zum Entpacken von .../gcc-8_8.3.0-6_i386.deb ...
    Entpacken von gcc-8 (8.3.0-6) über (8.3.0-6) ...
    Vorbereitung zum Entpacken von .../libstdc++-8-dev_8.3.0-6_i386.deb ... Entpacken von libstdc++-8-dev:i386 (8.3.0-6) über (8.3.0-6) ...
    Vorbereitung zum Entpacken von .../g++-8_8.3.0-6_i386.deb ...
    Entpacken von g++-8 (8.3.0-6) über (8.3.0-6) ...
    Vorbereitung zum Entpacken von .../libstdc++6-8-dbg_8.3.0-6_i386.deb ... Entpacken von libstdc++6-8-dbg:i386 (8.3.0-6) über (8.3.0-6) ...
    gcc-8 (8.3.0-6) wird eingerichtet ...
    libstdc++6-8-dbg:i386 (8.3.0-6) wird eingerichtet ...
    libstdc++-8-dev:i386 (8.3.0-6) wird eingerichtet ...
    g++-8 (8.3.0-6) wird eingerichtet ...
    Trigger für man-db (2.8.5-2) werden verarbeitet ...
    dbuster-i386_root:/> dpkg -l g++ Gewünscht=Unbekannt/Installieren/R=Entfernen/P=Vollständig Löschen/Halten
    | Status=Nicht/Installiert/Config/U=Entpackt/halb konFiguriert/
    Halb installiert/Trigger erWartet/Trigger anhängig
    |/ Fehler?=(kein)/R=Neuinstallation notwendig (Status, Fehler:
    GROSS=schlecht)
    ||/ Name Version Architektur Beschreibung +++-==============-============-============-================================= ii g++ 4:8.3.0-1 i386 GNU C++ compiler


    so that I have manually downloaded and installed these packages:

    ...> dpkg -i *.deb
    (Lese Datenbank ... 71276 Dateien und Verzeichnisse sind derzeit
    installiert.)
    Vorbereitung zum Entpacken von g++-8_8.3.0-6_i386.deb ...
    Entpacken von g++-8 (8.3.0-6) über (8.3.0-6) ...
    Vorbereitung zum Entpacken von g++-8-multilib_8.3.0-6_i386.deb ...
    Entpacken von g++-8-multilib (8.3.0-6) über (8.3.0-6) ...
    Vorbereitung zum Entpacken von gcc-8_8.3.0-6_i386.deb ...
    Entpacken von gcc-8 (8.3.0-6) über (8.3.0-6) ...
    Vorbereitung zum Entpacken von libstdc++6-8-dbg_8.3.0-6_i386.deb ...
    Entpacken von libstdc++6-8-dbg:i386 (8.3.0-6) über (8.3.0-6) ...
    Vorbereitung zum Entpacken von libstdc++-8-dev_8.3.0-6_i386.deb ...
    Entpacken von libstdc++-8-dev:i386 (8.3.0-6) über (8.3.0-6) ...
    gcc-8 (8.3.0-6) wird eingerichtet ...
    libstdc++6-8-dbg:i386 (8.3.0-6) wird eingerichtet ...
    libstdc++-8-dev:i386 (8.3.0-6) wird eingerichtet ...
    g++-8 (8.3.0-6) wird eingerichtet ...
    g++-8-multilib (8.3.0-6) wird eingerichtet ...
    Trigger für man-db (2.8.5-2) werden verarbeitet ... dbuster-i386_root:~/pkgdld> dpkg -l g++ Gewünscht=Unbekannt/Installieren/R=Entfernen/P=Vollständig Löschen/Halten
    | Status=Nicht/Installiert/Config/U=Entpackt/halb konFiguriert/
    Halb installiert/Trigger erWartet/Trigger anhängig
    |/ Fehler?=(kein)/R=Neuinstallation notwendig (Status, Fehler:
    GROSS=schlecht)
    ||/ Name Version Architektur Beschreibung +++-==============-============-============-================================= ii g++ 4:8.3.0-1 i386 GNU C++ compiler

    It still displays the old version though a package file called by a
    newer version was installed. To me it looks like if someone had updated
    the package but not changed the debian/changelog file at package
    creation. Can anyone confirm or help whether I really have a newer
    version? Anyway this is a 'bug'.

    After upgrading I have re-tried to build the newer Firefox but that
    did not work yet:

    firefox-esr-91.8.0esr> ../evoke-compilererr /usr/src/firefox-esr-91.8.0esr/gfx/wr/swgl /usr/src/firefox-esr-91.8.0esr during RTL pass: expand
    In file included from src/gl.cc:2643:
    src/rasterize.h: In function ‘void draw_quad_spans(int, Point2D*,
    uint32_t, glsl::Interpolants*, Texture&, Texture&, const ClipRect&)
    [with P = unsigned char]’:
    src/rasterize.h:782:20: internal compiler error: in convert_move, at
    expr.c:218
    static inline void draw_quad_spans(int nump, Point2D p[4], uint32_t z,
    ^~~~~~~~~~~~~~~
    0xf7961b40 __libc_start_main
    ../csu/libc-start.c:308
    Please submit a full bug report,


    What I would need for gcc folks to care about this compiler bug is an
    update to version gcc-8.5!

    https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105293

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Elmar Stellnberger@21:1/5 to All on Fri Nov 18 16:50:01 2022
    Am 09.04.22 um 23:31 schrieb Moritz Mühlenhoff:
    Friedhelm Waitzmann wrote:
    For the oldstable distribution (buster), these problems have
    been fixed in version 91.8.0esr-1~deb10u1.

    Where can I get this from for buster and architecture i386?
    <http://security.debian.org/debian-security/dists/buster/updates/main/binary-i386/Packages.xz>
    does not have it.

    The Firefox ESR91 series triggers an internal compiler error
    with the GCC version included in Debian 10, so there's no build
    available currently.

    There's one for Debian 11 (where GCC builds it correctly), but
    I'd instead suggest to switch to amd64 instead.

    Cheers,
    Moritz


    Hi Friedhelm, hi all Debian x86 fans,

    The Firefox compile bug has already been resolved since some time for
    Debian 10 as it seems. Today it has updated from Firefox 102.4.0esr to 102.5.0esr at me. It seems to be a Firefox only fix however, since gcc
    has not yet been updated for the 8 series. It is still gcc 8.3.0-6 and
    not 8.5 or later. According to gcc developers only the latest of the 8
    series is up-to-date and supported.

    Cheers,
    Elmar

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)