Source: openjdk-11
Version: 11.0.4+11-1
Severity: normal

OpenJDK captures the build user as the USERNAME variable in the configure
script and uses it in an interval VM version string that appears in libjvm.so:

    $ strings /usr/lib/jvm/java-11-openjdk-amd64/lib/server/libjvm.so |grep 
buildd
    buildd
    OpenJDK 64-Bit Server VM (11.0.4+11-post-Debian-1) for linux-amd64 JRE 
(11.0.4+11-post-Debian-1), built on Jul 17 2019 00:28:36 by "buildd" with gcc 
8.3.0

This prevents the openjdk package from being reproducible.

The attached patch modifies the build script to use a fixed value for
the USERNAME variable.

Emmanuel Bourg
Description: Makes the build user invariant to improve the reproducibility (it 
appears in the interval VM version in libjvm.so)
Author: Emmanuel Bourg <ebo...@apache.org>
Forwarded: no
--- a/make/autoconf/basics.m4
+++ b/make/autoconf/basics.m4
@@ -650,7 +650,7 @@
 
   # Setup username (for use in adhoc version strings etc)
   # Outer [ ] to quote m4.
-  [ USERNAME=`$ECHO "$USER" | $TR -d -c '[a-z][A-Z][0-9]'` ]
+  [ USERNAME="unknown" ]
   AC_SUBST(USERNAME)
 ])
 
_______________________________________________
Mailing list: https://launchpad.net/~openjdk
Post to     : openjdk@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openjdk
More help   : https://help.launchpad.net/ListHelp

Reply via email to