On Fri, Aug 12, 2016 at 01:55:50PM -0400, Daniel Kahn Gillmor wrote: > On Fri 2016-08-12 13:22:21 -0400, Santiago Vila wrote: > > On Mon, 27 Jun 2016, Daniel Kahn Gillmor wrote: > >> I think clang introduced -fdebug-prefix-map in 3.8.0 (see > >> https://bugs.debian.org/819185) and afl build-depends on clang-3.7. > >> > >> I assume that it's the reproducible-builds toolchain that's adding the > >> -fdebug-prefix-map option to CFLAGS, right? That's good -- it should > >> help avoid variations in the generated binaries due to build path alone, > >> so please keep it! seems like the right fix here is either to build afl > >> against a newer version of clang, or to resolve #819185 by backporting > >> the option to clang-3.7. > > > > Actually, it's dpkg-buildflags who's adding -fdebug-prefix-map. > > > > So this bug was not really blocked by 819185. afl could well drop such > > option from CFLAGS and friends, regardless of clang version used. > > Sure, but we don't want that option dropped -- we want reproducible > outputs regardless of the build path. It'd be better to fix the > toolchain (or to use a toolchain that's already fixed) than to mask the > option and make sks unreproducible when the build path varies.
Let's see if I understood: A. We want afl to build from source. B. We want afl to build reproducibly. What I said before is that A is not blocked by any bug in clang. And your reply basically says that "A and B" is better than "only A". Is this a state-the-obvious contest? :-) Thanks.
