#1149203 no warning for clearly invalid section

Package:
lintian
Source:
lintian
Submitter:
Simon Richter
Date:
2026-09-30 05:51:02 UTC
Severity:
normal
Tags:
#1149203#5
Date:
2026-09-28 08:58:16 UTC
From:
To:
Hi,

the rust-derivre 0.3.12-1 package declares

    Section: FIXME-(packages."(name)".section)

which somehow made it into the archive. Lintian does not complain about
this package.

Can we get a regex check /[a-z0-9-]+/ or /[a-z0-9]+(-[a-z0-9]+)*/ for
this field, ideally with "error" severity?

   Simon

#1149203#10
Date:
2026-09-28 10:10:30 UTC
From:
To:
There is a Lintian warning:
https://udd.debian.org/lintian/?packages=rust-derivre

Also, it's only partly in the archive. It has never built from source.

Thank you,
Jeremy Bícha

#1149203#15
Date:
2026-09-28 10:41:52 UTC
From:
To:
Hi,

Yes, but that is for the Description, not for the broken Section.

The concerning thing to me is that the archive accepted this and took
the section over verbatim (into the Sources index), so there is a long
chain of bad validation here that I've already written bug reports for,
but it is surprising that lintian doesn't complain.

    Simon

#1149203#20
Date:
2026-09-29 17:48:35 UTC
From:
To:
This package source is not there in the archive anymore and I see no other way
to get it. I took up a sample package and changed the section in d/control to

"Section: FIXME-(packages."(name)".section)"

On building the package I can see a warning emitted and I suppose the tag is present
already and probably was emitted.

However, for rust-derivre 0.3.12-1 I do not see this in the UDD and as per code it should
have. I am not sure where the problem exactly could be (somewhere in UDD? actual lintian?)

Can you give me a way to reproduce this?

W: librust-apr-dev: unknown-section FIXME-(packages."(name)".section)
N:
N:   The "Section:" field in this package's control file is not one of the
N:   sections in use on the ftp archive. Valid sections are currently admin,
N:   comm, cli-mono, database, debug, devel, doc, editors, electronics,
N:   embedded, fonts, games, gnome, gnu-r, gnustep, graphics, hamradio,
N:   haskell, httpd, interpreters, java, javascript, kde, libdevel, libs, lisp,
N:   localization, kernel, mail, math, misc, net, news, ocaml, oldlibs,
N:   otherosfs, perl, php, python, ruby, rust, science, shells, sound, tex,
N:   text, utils, vcs, video, web, x11, xfce, zope.
N:
N:   The section name should be preceded by either "contrib/", "non-free/" or
N:   "non-free-firmware/" if the package is in the according archive area.
N:
N:   Please refer to Sections (Section 2.4) in the Debian Policy Manual for
N:   details.
N:
N:   Visibility: warning
N:   Show-Always: no
N:   Check: fields/section

#1149203#25
Date:
2026-09-29 18:26:53 UTC
From:
To:
Control: tags -1 moreinfo
OK, I found them at https://ftp.debian.org/debian/pool/main/r/rust-derivre/rust-derivre_0.3.12-1.dsc

and I can see the below. I don't think there is anything for lintian to do here.

W: derivre: unknown-section FIXME-(packages."(name)".section)
N:
N:   The "Section:" field in this package's control file is not one of the
N:   sections in use on the ftp archive. Valid sections are currently admin,
N:   comm, cli-mono, database, debug, devel, doc, editors, electronics,
N:   embedded, fonts, games, gnome, gnu-r, gnustep, graphics, hamradio,
N:   haskell, httpd, interpreters, java, javascript, kde, libdevel, libs, lisp,
N:   localization, kernel, mail, math, misc, net, news, ocaml, oldlibs,
N:   otherosfs, perl, php, python, ruby, rust, science, shells, sound, tex,
N:   text, utils, vcs, video, web, x11, xfce, zope.
N:
N:   The section name should be preceded by either "contrib/", "non-free/" or
N:   "non-free-firmware/" if the package is in the according archive area.
N:
N:   Please refer to Sections (Section 2.4) in the Debian Policy Manual for
N:   details.
N:
N:   Visibility: warning
N:   Show-Always: no
N:   Check: fields/section
N:
N:

#1149203#32
Date:
2026-09-30 03:28:25 UTC
From:
To:
Hi,

(bookworm, lintian 2.116.3+deb12u1)

W: rust-derivre source: missing-debian-watch-file-standard [debian/watch]
W: rust-derivre source: newer-standards-version 4.7.4 (current is 4.6.2)
W: rust-derivre source: recommended-field (in section for source)
Priority [debian/control:1]
W: rust-derivre source: rust-boilerplate derivre

(trixie, lintian 2.122.0)

W: rust-derivre source: missing-debian-watch-file-standard [debian/watch]
W: rust-derivre source: newer-standards-version 4.7.4 (current is 4.7.2)
W: rust-derivre source: recommended-field (in section for source)
Priority [debian/control:1]
W: rust-derivre source: rust-boilerplate derivre

(sid, lintian 2.141.0)

W: rust-derivre source: rust-boilerplate derivre

I would indeed expect at least an "unknown-section" warning like you are
getting, but I also think a section name that uses uppercase characters,
quotation marks or parentheses warrants an error.

No idea why you are seeing a warning when I'm not, but if lintian.d.o
doesn't see it either, I'm at least not alone.

    Simon

#1149203#37
Date:
2026-09-30 05:13:37 UTC
From:
To:
That is because you are running lintian on the `.dsc`. The section check runs
on the `.deb`. Try doing a build+lintian run on `.deb` and you will be able to see it.
After some discussion on IRC, here is what happened - 0.3.12-1 was uploaded to
NEW with usual sources+binaries and now 2 things happened

a) the package FTBFS after being accepted due to some dependencies having different
versions than expected

b) the uploaded binaries were thrown away as a result of throw-away-binaries.

A -3 upload was done recently to fix all of this.
So I suppose lintian in the UDD never actually ran on the `.deb` and hence there is no entry shown.

I happen to think that there is nothing here that is needed in lintian since it was flagging
what it was supposed to flag. I am closing this bug report.

Feel free to re-open or file new bug reports if you think this should be addressed differently.

Best,
Nilesh

#1149203#38
Date:
2026-09-30 05:50:05 UTC
From:
To:
Hi,

Ah, but most people will be running lintian on the .dsc only if they are
doing source-only uploads.

The dsc contains the section in the Package-List tag, and lintian is
unpacking the sources and scanning the control file anyway, so I think
that should be a fairly cheap test.

    Simon