[debhelper-devel] Bug#866570: debhelper: dh_install takes filenames as absolute if debian/package.install starts with a slash

[Sven Joachim]

Package: debhelper
Version: 10.6
Severity: grave

If debian/package.install has lines that start with a slash, dh_install
takes those as absolute filenames.  I have just tried to build the
giflib package, and dh_install copied whole trees of the /usr directory
into the package build directories until it ran out of disk space
(building on a tmpfs).

,----
|$ cat debian/*.install
| /usr/bin
| /usr/include/*
| /usr/lib/*/*.a
| /usr/lib/*/*.so
| /usr/lib/*/*.so.*
`----


-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (101, 'experimental')
Architecture: i386 (x86_64)
Foreign Architectures: amd64

Kernel: Linux 4.11.8-nouveau (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages debhelper depends on:
ii  autotools-dev            20161112.1
ii  binutils                 2.28-6
ii  dh-autoreconf            14
ii  dh-strip-nondeterminism  0.035-2
ii  dpkg                     1.18.24
ii  dpkg-dev                 1.18.24
ii  file                     1:5.30-1
ii  libdpkg-perl             1.18.24
ii  man-db                   2.7.6.1-2
ii  perl                     5.24.1-4
ii  po-debconf               1.0.20

debhelper recommends no packages.

Versions of packages debhelper suggests:
ii  dh-make  2.201608

-- no debconf information