Your message dated Fri, 09 Dec 2016 16:31:16 +0000
with message-id <[email protected]>
and subject line Bug#847033: fixed in newlib 2.4.0.20160527-1
has caused the Debian Bug report #847033,
regarding newlib: please make the build reproducible (locale)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
847033: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847033
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: newlib
Version: 2.2.0+git20150830.5a3d536-1
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: locale

Hi!

While working on the “reproducible builds” effort [1], we have noticed
that newlib could not be built reproducibly.

In particular, the order in which object files get added to archives is
not deterministic. I think the problem is that the locale affects how
the shell sorts filenames.

I've attached two patches. The first modifies Makefile.am files to use
LC_ALL=C when adding members to archives, and as such is suitable for
sending upstream. The second is the equivalent change for Makefile.in,
and us such is suitable for applying to the Debian package (since it
does not invoke automake).

Regards,

Daf

 [1]: https://wiki.debian.org/ReproducibleBuilds
diff --git a/newlib/Makefile.am b/newlib/Makefile.am
index 5ecce4c..9cc1152 100644
--- a/newlib/Makefile.am
+++ b/newlib/Makefile.am
@@ -160,6 +160,7 @@ libc.a: libc/libc.a libm.a
 	rm -rf libc.a libg.a tmp
 	mkdir tmp
 	cd tmp; \
+	LC_ALL=C ; \
 	 $(AR) x ../libm.a $(MATHOBJS_IN_LIBC) ; \
 	 $(AR) x ../libc/libc.a ; \
 	 $(AR) $(AR_FLAGS) ../$@ *.o
diff --git a/newlib/libc/Makefile.am b/newlib/libc/Makefile.am
index 21a74fe..b741f24 100644
--- a/newlib/libc/Makefile.am
+++ b/newlib/libc/Makefile.am
@@ -107,6 +107,7 @@ libc.a: $(SUBLIBS)
 	rm -rf tmp
 	mkdir tmp
 	cd tmp; \
+	LC_ALL=C ; \
 	 for i in $(SUBLIBS); do \
 	   $(AR) x ../$$i; \
 	 done; \
diff --git a/newlib/libc/sys/linux/Makefile.am b/newlib/libc/sys/linux/Makefile.am
index 8dcc64e..d61ad36 100644
--- a/newlib/libc/sys/linux/Makefile.am
+++ b/newlib/libc/sys/linux/Makefile.am
@@ -196,6 +196,7 @@ lib.a:  $(lib_a_OBJECTS)
 	rm -rf tmp
 	mkdir tmp
 	cd tmp; \
+	LC_ALL=C ; \
 	for i in $(SUBLIBS); do \
 	  $(AR) x ../$$i; \
 	done; \
diff --git a/newlib/libm/Makefile.am b/newlib/libm/Makefile.am
index bc45816..a6bb44c 100644
--- a/newlib/libm/Makefile.am
+++ b/newlib/libm/Makefile.am
@@ -25,6 +25,7 @@ libm.a: $(SUBLIBS)
 	rm -rf tmp
 	mkdir tmp
 	cd tmp; \
+	LC_ALL=C ; \
 	  for i in $(SUBLIBS); do \
 	    $(AR) x ../$$i; \
 	done; \
diff --git a/newlib/Makefile.in b/newlib/Makefile.in
index 468ae99..2dc6388 100644
--- a/newlib/Makefile.in
+++ b/newlib/Makefile.in
@@ -908,6 +908,7 @@ uninstall-am: uninstall-toollibDATA uninstall-toollibLIBRARIES \
 @USE_LIBTOOL_FALSE@	rm -rf libc.a libg.a tmp
 @USE_LIBTOOL_FALSE@	mkdir tmp
 @USE_LIBTOOL_FALSE@	cd tmp; \
+@USE_LIBTOOL_FALSE@	LC_ALL=C; \
 @USE_LIBTOOL_FALSE@	 $(AR) x ../libm.a $(MATHOBJS_IN_LIBC) ; \
 @USE_LIBTOOL_FALSE@	 $(AR) x ../libc/libc.a ; \
 @USE_LIBTOOL_FALSE@	 $(AR) $(AR_FLAGS) ../$@ *.o
diff --git a/newlib/libc/Makefile.in b/newlib/libc/Makefile.in
index cbddc5f..abcd0c7 100644
--- a/newlib/libc/Makefile.in
+++ b/newlib/libc/Makefile.in
@@ -1026,6 +1026,7 @@ uninstall-am: uninstall-dvi-am uninstall-html-am uninstall-info-am \
 @USE_LIBTOOL_FALSE@	rm -rf tmp
 @USE_LIBTOOL_FALSE@	mkdir tmp
 @USE_LIBTOOL_FALSE@	cd tmp; \
+@USE_LIBTOOL_FALSE@	LC_ALL=C; \
 @USE_LIBTOOL_FALSE@	 for i in $(SUBLIBS); do \
 @USE_LIBTOOL_FALSE@	   $(AR) x ../$$i; \
 @USE_LIBTOOL_FALSE@	 done; \
diff --git a/newlib/libc/sys/linux/Makefile.in b/newlib/libc/sys/linux/Makefile.in
index b15741b..fbfd9d4 100644
--- a/newlib/libc/sys/linux/Makefile.in
+++ b/newlib/libc/sys/linux/Makefile.in
@@ -1599,6 +1599,7 @@ uninstall-am:
 @USE_LIBTOOL_FALSE@	rm -rf tmp
 @USE_LIBTOOL_FALSE@	mkdir tmp
 @USE_LIBTOOL_FALSE@	cd tmp; \
+@USE_LIBTOOL_FALSE@	LC_ALL=C; \
 @USE_LIBTOOL_FALSE@	for i in $(SUBLIBS); do \
 @USE_LIBTOOL_FALSE@	  $(AR) x ../$$i; \
 @USE_LIBTOOL_FALSE@	done; \
diff --git a/newlib/libm/Makefile.in b/newlib/libm/Makefile.in
index 86c4a8e..d52cbd6 100644
--- a/newlib/libm/Makefile.in
+++ b/newlib/libm/Makefile.in
@@ -899,6 +899,7 @@ uninstall-am: uninstall-dvi-am uninstall-html-am uninstall-info-am \
 @USE_LIBTOOL_FALSE@	rm -rf tmp
 @USE_LIBTOOL_FALSE@	mkdir tmp
 @USE_LIBTOOL_FALSE@	cd tmp; \
+@USE_LIBTOOL_FALSE@	LC_ALL=C; \
 @USE_LIBTOOL_FALSE@	  for i in $(SUBLIBS); do \
 @USE_LIBTOOL_FALSE@	    $(AR) x ../$$i; \
 @USE_LIBTOOL_FALSE@	done; \

--- End Message ---
--- Begin Message ---
Source: newlib
Source-Version: 2.4.0.20160527-1

We believe that the bug you reported is fixed in the latest version of
newlib, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Agustin Henze <[email protected]> (supplier of updated newlib package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 09 Dec 2016 11:45:41 -0300
Source: newlib
Binary: libnewlib-dev libnewlib-doc libnewlib-arm-none-eabi newlib-source
Architecture: source all
Version: 2.4.0.20160527-1
Distribution: unstable
Urgency: medium
Maintainer: Agustin Henze <[email protected]>
Changed-By: Agustin Henze <[email protected]>
Description:
 libnewlib-arm-none-eabi - C library and math library compiled for bare metal 
using Cortex A
 libnewlib-dev - C library and math library intended for use on embedded systems
 libnewlib-doc - C library and math library intended for use on embedded 
systems (
 newlib-source - C library and math library intended for use on embedded 
systems (
Closes: 847033
Changes:
 newlib (2.4.0.20160527-1) unstable; urgency=medium
 .
   [ Philippe Mathieu-Daudé ]
   * Imported Upstream version 2.4.0.20160527
 .
   [ Agustin Henze ]
   * Make the build reproducible (locale) (Closes: #847033)
Checksums-Sha1:
 37cdacfc159545856c325289fca4b60870e20c3e 2199 newlib_2.4.0.20160527-1.dsc
 d4202edb39633f1529622294d946e3e23999b436 5169820 
newlib_2.4.0.20160527.orig.tar.xz
 91a7c5f437da5709ed927062c84989c6220198bc 12488 
newlib_2.4.0.20160527-1.debian.tar.xz
 c96aaa591f9bc77e3be03e16cd15fbbd75c718bb 12475924 
libnewlib-arm-none-eabi_2.4.0.20160527-1_all.deb
 693a7b3ec3d8e81020b247400d9c0ff897aa0b89 238122 
libnewlib-dev_2.4.0.20160527-1_all.deb
 48c8635220de7ef24d1fcaf4be8c4f9d75a8cfca 289476 
libnewlib-doc_2.4.0.20160527-1_all.deb
 6541886f3611eab7cd87ec585502bb17acfaadcc 5309896 
newlib-source_2.4.0.20160527-1_all.deb
 c2a6f6945ef7bd5879226e4bd559bfa02fbd3c9b 6091 
newlib_2.4.0.20160527-1_amd64.buildinfo
Checksums-Sha256:
 9379da4e46f21fffdd752c056284448517c7982700571ef6298e3fb4c1342bd1 2199 
newlib_2.4.0.20160527-1.dsc
 7c68af5ad55bfd3daaa26e2b00557c79fe82828f89dbbe3a63c13f10c3336a09 5169820 
newlib_2.4.0.20160527.orig.tar.xz
 e86a30ef6d3bafac4d7a960b04696fe22c6e2e67ef5db9f6042f892cd470005d 12488 
newlib_2.4.0.20160527-1.debian.tar.xz
 b0e0d0f21cbaa18562d185cdb84761fbc2e521739c1407dca86b20cc8fab8c27 12475924 
libnewlib-arm-none-eabi_2.4.0.20160527-1_all.deb
 94ed6d2d60d3b70e1298340d0832582e81f615a556bac5b51aada5cbe3cb6e56 238122 
libnewlib-dev_2.4.0.20160527-1_all.deb
 6443487b81de1a0b808ea093829bc7e211d89d4769b36f246e7a0b941b72785b 289476 
libnewlib-doc_2.4.0.20160527-1_all.deb
 9dacb5e8cd91def5b67535ec95a84076f31084c2c1b504a792c490a21a2b6578 5309896 
newlib-source_2.4.0.20160527-1_all.deb
 1890d728dd79ff7add7ff38b4052b43279588e72cf15e04e63c39b850915ae62 6091 
newlib_2.4.0.20160527-1_amd64.buildinfo
Files:
 c629497875f5ac1727121867de97c95e 2199 devel extra newlib_2.4.0.20160527-1.dsc
 34f1b919d567ecc37b274c8bd528de7d 5169820 devel extra 
newlib_2.4.0.20160527.orig.tar.xz
 8b55f55924e021d5e0cd518e9cff0259 12488 devel extra 
newlib_2.4.0.20160527-1.debian.tar.xz
 cc7a6037209607300fc3303c1cac79a6 12475924 libs extra 
libnewlib-arm-none-eabi_2.4.0.20160527-1_all.deb
 7c2ceb53b19d8ff0a04a35915ac21cae 238122 libdevel extra 
libnewlib-dev_2.4.0.20160527-1_all.deb
 5b53b485dfaa6aa0249a158ce5a61713 289476 doc extra 
libnewlib-doc_2.4.0.20160527-1_all.deb
 4218ea5947ce9e84f3cc5012340e1fa8 5309896 devel extra 
newlib-source_2.4.0.20160527-1_all.deb
 337ec76407f7c63a3af08f317b7ea83e 6091 devel extra 
newlib_2.4.0.20160527-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEd4G8WDJexuSWyvTtAihSEHiQOPIFAlhKzFMACgkQAihSEHiQ
OPIJZg//XwGDnPSPruR0YR72p8E/Csxh+P4O5WIz4X9C5yaMeAcj3jq53x32M+rF
zjqTnivUw2dYQAKXBqINbHdDn+Whbrq0lEpjXmwRr+wrI+F297NMGBDLubnCB52M
X5Hh9K8byhIH0QFW4pNJW5IhD8TRXd6IgRVJco0w9m0QqvRtMdP8nGZYnFrOKfjO
BMiY4RKM+pbzMXVu+90+ETfGHwDfpTi+if9gcpywSRhbBWRwiDBxK+Sxcutwn6hv
goseBRI5nXPtQeN1XdtnQr7jsHDO8yg2dKWurI2o9rmLs98RA7QidpV92rdY5kaH
2YGxKbNVZT1CPPm7+1ikYzUMOBKAzN6hufFK/iRbYRbxYqTyQGUr30xj5ek1ET0N
TVO5FIbmVVhrXGTJ23F5u9dxH1ax+lVhf0fjOVeILrDw1rknX05UyERoeQFM/IiQ
n3vUFD2LhOF+u2jwMzEW5cV9nN90V6Wz8Q824d/zQzAky5dSpBVQLctmywekmqor
gmG2oXDQ9YPvP5d07dhBvfEoHGFOoYW3u3YR54JmtFPib7GwecnY5vt8ueepiUBN
6hG1qtuxZ5xtTNqWxnHtv62TqfgjZmRE/0PXNGOouYGqvnAEHx5KvV0i6/3r9C70
/v5IKC28ZgnIib/CcQJyrneJzM5NXrGTSLSJgs8Lzpr3O3LGgNM=
=0eKU
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to