Your message dated Mon, 02 Nov 2020 15:48:31 +0000
with message-id <[email protected]>
and subject line Bug#973595: fixed in emscripten 2.0.8~dfsg1-1
has caused the Debian Bug report #973595,
regarding emscripten: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
973595: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=973595
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: emscripten
Version: 2.0.8~dfsg-6
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: randomness
X-Debbugs-Cc: [email protected]
Hi,
Whilst working on the Reproducible Builds effort [0] we noticed that
emscripten could not be built reproducibly.
This is because it generates a switch/case statement using Python's
random functionality.
Patch attached that seeds this random component using the
SOURCE_DATE_EPOCH environment variable [1].
[0] https://reproducible-builds.org/
[1] https://reproducible-builds.org/specs/source-date-epoch/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
--- a/debian/patches/3001_reproducible_build.patch 1970-01-01
01:00:00.000000000 +0100
--- b/debian/patches/3001_reproducible_build.patch 2020-11-02
10:10:35.965216078 +0000
@@ -0,0 +1,23 @@
+Description: Make the build reproducible
+Author: Chris Lamb <[email protected]>
+Last-Update: 2020-11-02
+
+--- emscripten-2.0.8~dfsg.orig/tools/create_dom_pk_codes.py
++++ emscripten-2.0.8~dfsg/tools/create_dom_pk_codes.py
+@@ -32,7 +32,7 @@
+ # Use #include <emscripten/dom_pk_codes.h> in your code to access these IDs.
+
+ from __future__ import print_function
+-import sys, random
++import sys, random, os
+
+ input_strings = [
+ (0x0, 'Unidentified', 'DOM_PK_UNKNOWN'),
+@@ -241,6 +241,7 @@ def hash_all(k1, k2):
+ # Try hash function format h_i = ((h_(i-1) ^ k_1) << k_2) ^ s_i, where h_i is
the hash function
+ # value at step i, k_1 and k_2 are the constants we are searching, and s_i is
the i'th input
+ # character
++random.seed(os.environ.get('SOURCE_DATE_EPOCH'))
+ perfect_hash_table = None
+ while perfect_hash_table == None:
+ # The search space is super-narrow, but since there are so few items to
hash, practically
--- a/debian/patches/series 2020-11-02 09:46:05.927304184 +0000
--- b/debian/patches/series 2020-11-02 10:10:35.153204675 +0000
@@ -10,3 +10,4 @@
2006_call_emscripten_in_PATH.patch
2007_es_check.patch
2008_minify_html.patch
+3001_reproducible_build.patch
--- End Message ---
--- Begin Message ---
Source: emscripten
Source-Version: 2.0.8~dfsg1-1
Done: Jonas Smedegaard <[email protected]>
We believe that the bug you reported is fixed in the latest version of
emscripten, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jonas Smedegaard <[email protected]> (supplier of updated emscripten package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 02 Nov 2020 16:36:23 +0100
Source: emscripten
Architecture: source
Version: 2.0.8~dfsg1-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Javascript Maintainers
<[email protected]>
Changed-By: Jonas Smedegaard <[email protected]>
Closes: 973595
Changes:
emscripten (2.0.8~dfsg1-1) experimental; urgency=medium
.
* repackage source tarball:
+ avoid convenience code copies:
- python module ply (packaged separately)
- Java Native Interface forked with added emjvm.js
(seemingly unused)
* drop obsolete lintian overrides
* build-depend on and suggest python3-ply,
and document its use in long description
* update patches 1001 2003 for omitted source files
* add patch 2009 to use system-shared closure-compiler
* add patch 1005 to make build reproducible;
closes: bug#973595, thanks to Chris Lamb
* avoid checking tests requiring closure-compiler
* copyright: tighten coverage of musl
* adjust build routines for omitted source files
Checksums-Sha1:
440a3f91660ee18ea6d208eedd67ad0a6a74ed5e 2497 emscripten_2.0.8~dfsg1-1.dsc
3247b987333f8c52791f330532877e08c16261e6 17779680
emscripten_2.0.8~dfsg1.orig.tar.xz
a1d3b84552377bf42cc5c8b33021b4a451973583 81656
emscripten_2.0.8~dfsg1-1.debian.tar.xz
db5e952bcf239c1cafec68ec0babb44229e7cd29 13851
emscripten_2.0.8~dfsg1-1_amd64.buildinfo
Checksums-Sha256:
27e4f0a10faa09f46d9772bd8d29e49b650c9c91188e87ff55af4c66d4b3fb78 2497
emscripten_2.0.8~dfsg1-1.dsc
e9f75bd5ba2f51b5e40db1e5aeaae708f129d03a98ac575246d837e392ddba75 17779680
emscripten_2.0.8~dfsg1.orig.tar.xz
030795d0f8363865f6a6ba6686c0e3a7c46543b3b5ed52d0dad31da5b4279eb8 81656
emscripten_2.0.8~dfsg1-1.debian.tar.xz
a20d447eaf411e920f61349e1e0c2db960a491b688e0541325043a6c134f01ec 13851
emscripten_2.0.8~dfsg1-1_amd64.buildinfo
Files:
9767f75a876ac2c0913ffc3fa38494b6 2497 devel optional
emscripten_2.0.8~dfsg1-1.dsc
3cdaf2f25272724c0f33e1d4fdb130f1 17779680 devel optional
emscripten_2.0.8~dfsg1.orig.tar.xz
18ff51f5f0cbcf8e107c5ca3be860dcb 81656 devel optional
emscripten_2.0.8~dfsg1-1.debian.tar.xz
edd773c01589c8de0cff07ffb20f3dfd 13851 devel optional
emscripten_2.0.8~dfsg1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=IeIB
-----END PGP SIGNATURE-----
--- End Message ---
--
Pkg-javascript-devel mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
