Your message dated Fri, 04 Mar 2016 07:50:17 +0000
with message-id <[email protected]>
and subject line Bug#778862: fixed in ispell 3.4.00-5
has caused the Debian Bug report #778862,
regarding ispell: please make building .hash files reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
778862: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778862
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: ispell
Version: 3.3.02-6
Severity: wishlist
User: [email protected]
Usertags: randomness toolchain
Hi!
While working on Debian's “reproducible builds” effort [1], we have
noticed that buildhash from ispell produces unreproducible .hash files
(example [2]).
After some investigation, I found out that those undeterministic lines
come when "sflaglist" (which is a list of "flagent" structs) is written [3].
The problem is that "sizeof(struct flagent)" is 800 bytes, while the summed up
size of the individual members is only 794 bytes [4].
So after those 794 bytes are written, the remaining 6 bytes are read from
uninitialized memory (which is undeterministic).
Packing the struct (__attribute__ ((__packed__))) would probably help, but
is no solution as this would change the size of the .hash files and other
tools reading them will probably have problems.
The best solution is probably to initialize the whole sflaglist
(or each flagent) with zero when it is allocated.
Regards,
Reiner
[1]: https://wiki.debian.org/ReproducibleBuilds
[2]: https://packages.debian.org/jessie/lava-server
[3]: https://sources.debian.net/src/ispell/3.3.02-6/buildhash.c/#L398
[4]: https://sources.debian.net/src/ispell/3.3.02-6/ispell.h/#L332
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Source: ispell
Source-Version: 3.4.00-5
We believe that the bug you reported is fixed in the latest version of
ispell, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Robert Luberda <[email protected]> (supplier of updated ispell package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 04 Mar 2016 08:34:01 +0100
Source: ispell
Binary: ispell ienglish-common iamerican ibritish iamerican-small
ibritish-small iamerican-large ibritish-large iamerican-huge ibritish-huge
iamerican-insane ibritish-insane
Architecture: source
Version: 3.4.00-5
Distribution: unstable
Urgency: medium
Maintainer: Robert Luberda <[email protected]>
Changed-By: Robert Luberda <[email protected]>
Description:
iamerican - American English dictionary for ispell (standard version)
iamerican-huge - American English dictionary for ispell (huge)
iamerican-insane - American English dictionary for ispell (insane version)
iamerican-large - American English dictionary for ispell (large)
iamerican-small - American English dictionary for ispell (small)
ibritish - British English dictionary for ispell (standard version)
ibritish-huge - British English dictionary for ispell (huge)
ibritish-insane - British English dictionary for ispell (insane version)
ibritish-large - British English dictionary for ispell (large)
ibritish-small - British English dictionary for ispell (small)
ienglish-common - Common files for British and American ispell dictionaries
ispell - International Ispell (an interactive spelling corrector)
Closes: 778862 815160 816572
Changes:
ispell (3.4.00-5) unstable; urgency=medium
.
* Add 0035-Force-text-grep-in-munchlist.patch to pass the `-a' flag to grep
invocations not to fail on national characters (closes: #816572, #815160).
* Add 0036-Reproducible-hashes.patch to hopefully make builds of hashes
reproducible (closes: #778862).
* debian/rules: Enable all hardening flags.
* debian/control:
+ use https for Vcs-Browser field;
+ bump Standards-Version to 3.9.7.
Checksums-Sha1:
1f4cf743d653826a382538980cd453c52722db4d 2802 ispell_3.4.00-5.dsc
6eaa0bc3394b6f0158492c843efef4497c534bb0 42196 ispell_3.4.00-5.debian.tar.xz
Checksums-Sha256:
498ba2e393c834478df0895d8e19f7eb099d2fc73ee9bb943c0547be99acacf0 2802
ispell_3.4.00-5.dsc
4e567e254de66aec0cab74ebbff277f44938da1d5c35113c8ee428b2c1c3a523 42196
ispell_3.4.00-5.debian.tar.xz
Files:
cfb7ddeccd8e882b59202486b115d4d1 2802 text optional ispell_3.4.00-5.dsc
ca40842a5ee90eb40d3d1b8bf83a71bb 42196 text optional
ispell_3.4.00-5.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=RsJb
-----END PGP SIGNATURE-----
--- End Message ---
