Dear Maintainer,

when invoking 'td' I got:

*** stack smashing detected ***: terminated

I identified two problems which I fixed and described in
03-avoid-smashed-stack.diff. The other patches are minor changes to fix
some gcc warnings.

Thanks and happy hacking,

   Wolfram

Hi Rene,

some contributor to our Debian sprint found a bug inside textdraw and
fixed it.  I've NMUed his fixes to delayed=10.  All changes of the NMU
are in Git.

Just let me know if I should cancel the upload.

Kind regards
   Andreas.

Hi

Am 22.02.26 um 17:58 schrieb Andreas Tille:
Good. I saw  the report already earlier and wanted to apply them later tonight (aka now).

After 2 hours? WTF? You should give people the chance to apply patches in bugreports. I did not NMU arrow in a row for the last days too.

(Which actually hinders work, in contrast to this low-profile leaf package)

Whatever, I uploaed -2 (with the changelog fixed and the watch file change reverted, it points to the NoSite fake anyway because people insist of having a watch even when one doesn't need one.)


Regards,


Rene

We believe that the bug you reported is fixed in the latest version of
textdraw, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1128731@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Rene Engelhard <rene@debian.org> (supplier of updated textdraw package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 22 Feb 2026 20:17:34 +0100
Source: textdraw
Architecture: source
Version: 0.2+ds-2
Distribution: unstable
Urgency: medium
Maintainer: Rene Engelhard <rene@debian.org>
Changed-By: Rene Engelhard <rene@debian.org>
Closes: 1128731
Changes:
 textdraw (0.2+ds-2) unstable; urgency=medium
 .
   * add various patches from Wolfram Sang:
     - Fix two problems causing smashed stacks
       Closes: #1128731
     - Fix several zero-length gnu_printf format string [-Wformat-zero-length]
     - Fix warning: variable ‘c’ set but not used [-Wunused-but-set-variable]
     - Fix warning: format ‘%d’ expects argument of type ‘int’, but argument 6
       has type ‘size_t’
Checksums-Sha1:
 cd395e76ea01be7b5590b3afd5a7cc5ee0ad4ab4 1821 textdraw_0.2+ds-2.dsc
 4ea64ee70b908f3bfdb12c89b0be838feaf55876 5988 textdraw_0.2+ds-2.debian.tar.xz
 a73499eb20b94f509d1fc3a013dded3b6d39b59e 6153 textdraw_0.2+ds-2_source.buildinfo
Checksums-Sha256:
 2fd67d211194c911852be862321c3055b8cf13acd32744ab0357b759997c5ddc 1821 textdraw_0.2+ds-2.dsc
 f4b73bf8a2987aa56b82581e9fe23e982aea5a23a66630b5ca7b564b69d29af6 5988 textdraw_0.2+ds-2.debian.tar.xz
 c921787d22025f188f9768bffcfe55b87a897877fa2fcaa65e999e2ca346f23b 6153 textdraw_0.2+ds-2_source.buildinfo
Files:
 374b036e858f22a34b1ea43f631e1472 1821 graphics optional textdraw_0.2+ds-2.dsc
 e8faa14147ab9517ee09f68d487b6598 5988 graphics optional textdraw_0.2+ds-2.debian.tar.xz
 21f2d442271ce82a3cc6909aba196b40 6153 graphics optional textdraw_0.2+ds-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=ruLn
-----END PGP SIGNATURE-----

Hi,

to provide some context: Wolfram Sang is a Kernel developer.  He found
this bug in textdraw and joined the Debian Med Sprint to refresh his
Debian packaging skills.  We had a nice evening, he fixed the RC bug and
while striving for perfectness fixed a lot of compiler warnings - great.

My goal was to demonstrate what else can be changed in the packaging so
I picked the lintian warning about newer watch file standard.  The
upload to delayed=10 was done to somehow complete the sprint session.

I was thanking Wolfram for his kind and dedicated help and the nice chat
we had.  What might be nice as well if the package maintainer would
thank him for the contribution as well.

Kind regards
   Andreas.

Hi,

Am 23.02.26 um 21:22 schrieb Andreas Tille:

I wasn't questioning the patches itself and also would have just applied them.

a watch v4 -> v5 is even a lesser NMU-worthy thing.

That's implied by the changelog.


Regards,


Rene

Hi,


you BTW could have done a Team upload. Wouldn't have mind. I actually "sponsored" Mechtildes last one

But a NMU has a meaning and the NMU version has a meaning and it turns red in DDPO. THAT is what I mind.

That said, if you insist on v4->v5 feel free to do a (unneeded) team upload.


Regards,


Rene

Hi Rene,

Am Mon, Feb 23, 2026 at 09:39:08PM +0100 schrieb Rene Engelhard:

Thank you for this hint.  I absolutely share your opinion about team
uploads of Debian team.  I simply became unsure about this since the
heavy discussion on debian-devel last year with no consensus about the
interpretation that this is welcome.

I would have loved if you would have answered my question
  "Just let me know if I should cancel the upload."
with
  "Please cancel and do a Team upload."

Understand.  Will remind this.

My point was to show the newcomer once he got rid of many compiler
warning we can also get rid of some lintian warning.  I do not
understand why you reverted this but I see no reason to do this as the
only reason for an upload.

BTW, I understand the NMU touched a nerve - that is fair, and I take note of
your preference for a Team upload next time. But perhaps we can separate
that frustration from the question of how we treat newcomers who
contribute in good faith. A simple "thanks, Wolfram" on this bug log
would go a long way, both for him and for the impression Debian leaves
on people refreshing their packaging skills.

Thank you for your quick upload of the package
    Andreas.