Your message dated Tue, 17 Nov 2020 11:33:32 +0000 with message-id <[email protected]> and subject line Bug#969320: fixed in aflplusplus 2.68c-1 has caused the Debian Bug report #969320, regarding aflplusplus: please make the build reproducible to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 969320: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=969320 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Source: aflplusplus Version: 2.67c-1 Severity: wishlist Tags: patch User: [email protected] Usertags: shell X-Debbugs-Cc: [email protected] Hi, Whilst working on the Reproducible Builds effort [0] we noticed that aflplusplus could not be built reproducibly. Here is the variation in the manpage │ │ │ │ │ -.B afl-clang-fast \- /bin/sh: 1: ./afl-clang-fast: not found │ │ │ │ │ +.B afl-clang-fast \- /bin/sh: ./afl-clang-fast: No such file or directory This is, I think, because we do not build or keep these variants on non-x86 systems, so the call in the Makefile fails with the above message. This then varies depending on the user's shell that /bin/sh symlinks to (!), rendering the package reproducible. Untested patch attached that also removes these manpages from the binary .deb along with the other deletions in debian/rules, but this may not be the right approach for your package. cd debian/afl++/usr/bin/ && rm afl-gcc afl-g++ cd debian/afl++/usr/lib/afl/ && rm as afl-as cd debian/afl++-clang/usr/bin/ && rm afl-clang afl-clang++ + cd debian/afl++-clang/usr/share/man/man8 && rm afl-clang-fast.8 afl-clang-fast++.8 There is also a variation in these manpages based on the build date: │ │ │ │ │ -.TH afl-clang-fast 8 2021-10-03 afl++ │ │ │ │ │ +.TH afl-clang-fast 8 2020-08-31 afl++ ... but I can't quite see why as you do appear to be using the SOURCE_DATE_EPOCH environment variable. It may not matter if we don't even ship them, hence why I'm not immediately investigating this angle. [0] https://reproducible-builds.org/ Regards, -- ,''`. : :' : Chris Lamb `. `'` [email protected] / chris-lamb.co.uk `-diff --git a/debian/rules b/debian/rules index fd08dc5..99e2477 100755 --- a/debian/rules +++ b/debian/rules @@ -44,6 +44,7 @@ ifneq "$(AFL_NO_X86)" "" cd debian/afl++/usr/bin/ && rm afl-gcc afl-g++ cd debian/afl++/usr/lib/afl/ && rm as afl-as cd debian/afl++-clang/usr/bin/ && rm afl-clang afl-clang++ + cd debian/afl++-clang/usr/share/man/man8 && rm afl-clang-fast.8 afl-clang-fast++.8 endif override_dh_auto_test:
--- End Message ---
--- Begin Message ---Source: aflplusplus Source-Version: 2.68c-1 Done: =?utf-8?q?Rapha=C3=ABl_Hertzog?= <[email protected]> We believe that the bug you reported is fixed in the latest version of aflplusplus, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Raphaël Hertzog <[email protected]> (supplier of updated aflplusplus package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 17 Nov 2020 12:06:15 +0100 Source: aflplusplus Architecture: source Version: 2.68c-1 Distribution: unstable Urgency: medium Maintainer: Debian Security Tools <[email protected]> Changed-By: Raphaël Hertzog <[email protected]> Closes: 969320 973557 974783 Changes: aflplusplus (2.68c-1) unstable; urgency=medium . * New upstream version 2.68c * Add a patch to improve reproducibility (Closes: #969320) * Improve long description to make it clear that afl is unmaintained (Closes: #973557) * Switch to clang/LLVM 11 (Closes: #974783) * Drop all patches, they have been merged upstream. Checksums-Sha1: cd1a0c0c4363569948bdd643f494daa2750e3785 2067 aflplusplus_2.68c-1.dsc a4f60d10495d17591614aab99a4011d3ea99959c 1675912 aflplusplus_2.68c.orig.tar.gz 4505362444b6aa24aa31a374089311106e36e319 5608 aflplusplus_2.68c-1.debian.tar.xz 2a52ee3eddbb50c7afe076d4e5d7142757da08a8 6880 aflplusplus_2.68c-1_source.buildinfo Checksums-Sha256: 38a6c5ac7f8511d53da08fdba241fe506ccfd022cab88a3d6c1f147dccf1754e 2067 aflplusplus_2.68c-1.dsc 862e155c97737770baa26ffedf324a7fa255b757c85b0c9a6f312264f2ca29c5 1675912 aflplusplus_2.68c.orig.tar.gz 9f25f0b432632378b21e058c5349f2d2c21aa740a94d219f0e570118d6010595 5608 aflplusplus_2.68c-1.debian.tar.xz 667eac12d2fe8a19dd594ac426f0b1b5d046e831e5b1075ead9797b8afa23915 6880 aflplusplus_2.68c-1_source.buildinfo Files: c1486836f6fc351c75559dae17507926 2067 devel optional aflplusplus_2.68c-1.dsc d193b5f93e53d0acb749fcf01faf27f7 1675912 devel optional aflplusplus_2.68c.orig.tar.gz 5b73e2174f7e14a36d00eba619e5cd17 5608 devel optional aflplusplus_2.68c-1.debian.tar.xz 894849da6b0a04bc15aa1e94b648aaf1 6880 devel optional aflplusplus_2.68c-1_source.buildinfo -----BEGIN PGP SIGNATURE----- Comment: Signed by Raphael Hertzog iQEzBAEBCgAdFiEE1823g1EQnhJ1LsbSA4gdq+vCmrkFAl+zsksACgkQA4gdq+vC mrnPTgf/XAflHEk0DM/cBlgDGQYoz0QInWRrkx8E43R5Cx589czosZfYvdZ9xs0u iwEYZo5Fz2q6tmbPbKzgPz4qdXlKFoO+KHK2Ne3aC9k7Xtxw3cSKNDAsbAeDE5l3 YqLPxhuivxbwPGwceoQ4mycYZeSChtPn4NvrPYw6zG8qKce3XFGPmmBN00QTol+3 9kXWvXfI1HXM7XuVzCUUXTeOvCExouEST1bpZd1I0LP/Ca/zfQv9XEpBcpADskOR 9WRw+hczjy2b68JZzePqOI11hT055I3pg+4kxfeDgmA3Q1AFHDLUSUJxWS4PMYtC 3VxPX/+AlxgzIXXkEd+MJtEksoxReg== =JBim -----END PGP SIGNATURE-----
--- End Message ---
