fix(inspectors/deb): handle more compression methods
Metadata
Current evaluation
Merged PR #339 as 8ea9e8e: DEB inspection now supports xz control files and gzip data files, and rejects packages missing parsed name/version; fixes #337.
Resolution: closed resolved
Reason: Merged PR fetch-service#339 landed as commit 8ea9e8e. It added the compression handling and stricter validation, with the PR explicitly stating that it fixes #337.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Handle control files compressed with xz and data files compressed
with gzip. Fail if artifact name and version are not extracted
(meaning that the control file was not properly read and parsed).
Fixes #337
Signed-off-by: Claudio Matsuoka <claudio.matsuoka@canonical.com>
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #339 as 8ea9e8e: DEB inspection now supports xz control files and gzip data files, and rejects packages missing parsed name/version; fixes #337. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged deb inspector support for xz-compressed control files and gzip-compressed data files, with failure on missing artifact name/version. Fixes #337. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #339 (8ea9e8e), adding xz control-file and gzip data-file support to the deb inspector and failing when package metadata cannot be extracted; fixes #337. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged. The DEB inspector now handles xz-compressed control files and gzip-compressed data files, failing if artifact name or version extraction fails. Resolves #337. Approved by two reviewers and passed CI checks. |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Related To:
fetch-service#337
(confidence 100%)
Unsupported compression in DEB control files was the defect addressed by PR #339.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #337 Debs are approved even if control file uses unsupported compression | fetch-service | closed | Fixed by merged PR #339 (commit 8ea9e8e), adding xz-compressed control-file and gzip-compressed data-file support to the Debian inspector. | |
| #596 fix(i/deb): parse uncompressed control and data files | fetch-service | merged | Merged as commit 4a235b6; adds plain "control.tar" and "data.tar" ar-member cases in inspectors/deb/deb.go so uncompressed .deb archives (e.g. linux-firmware 20240318.git3b128b60-0ubuntu2.25) get inspected; docs/reference/deb.rst updated. | |
| #61 inspectors: add apt and deb file inspectors | fetch-service | merged | Merged PR #61 in commit 566f57c, adding stateful APT and DEB inspectors to validate signed InRelease files, Packages.xz indexes, and .deb packages. |