On Thu, 30 Jan 2025, Sam Pinkus wrote:

On 29/1/25 06:41, Sebastian Andrzej Siewior wrote:

override_dh_update_autotools_config:
    ./autogen.sh

How is this different from the current autoreconf step that is
already as part of dh?

Not effectively, other than being vulnerable to less well-thought-out
upstream autogen.sh code.

The default update autotools dh rule doesn't seem to work / produce the same result without the autogen assets already present in the package source.

That’s irrelevant (and, in fact, highly desired, since the ones in
Debian also patch in e.g. support for new architectures). Furthermore,

Note that problem back then was that the shipped archived
contained m4 files so the autogen step did not "help".

the attack actually *relied* on doing so.

bye,
//mirabilos
--
"Using Lynx is like wearing a really good pair of shades: cuts out
the glare and harmful UV (ultra-vanity), and you feel so-o-o COOL."
-- Henry Nelson, March 1999

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)