Your message dated Tue, 12 Jan 2016 22:20:39 +0000
with message-id <e1aj7it-00074t...@franck.debian.org>
and subject line Bug#808713: fixed in mozilla-devscripts 0.43
has caused the Debian Bug report #808713,
regarding mozilla-devscripts: please sort file list in preferences files
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
808713: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=808713
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: mozilla-devscripts
Version: 0.42
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: fileordering toolchain
X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org

Hi!

While working on the "reproducible builds" effort [1], we have noticed
that mozilla-devscripts embeds file lists in undeterministic readdir
order into .js files.

The attached patch fixes this by sorting the list of files.

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds
diff --git a/install-xpi b/install-xpi
index 4e7c674..aba8773 100755
--- a/install-xpi
+++ b/install-xpi
@@ -131,7 +131,7 @@ def install_xpi(script_name, package, xpi_file, exclude, install_dir, links,
               (script_name, xpi_file), file=sys.stderr)
         sys.exit(XPI_FILE_DOES_NOT_EXISTS)
     zfobj = zipfile.ZipFile(xpi_file)
-    xpi_content = zfobj.namelist()
+    xpi_content = sorted(zfobj.namelist())
 
     # determine installation directory
     if get_arch(package, debian_directory) == "all":

--- End Message ---
--- Begin Message ---
Source: mozilla-devscripts
Source-Version: 0.43

We believe that the bug you reported is fixed in the latest version of
mozilla-devscripts, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 808...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Benjamin Drung <bdr...@debian.org> (supplier of updated mozilla-devscripts 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 12 Jan 2016 23:07:40 +0100
Source: mozilla-devscripts
Binary: mozilla-devscripts
Architecture: source all
Version: 0.43
Distribution: unstable
Urgency: medium
Maintainer: Debian Mozilla Extension Maintainers 
<pkg-mozext-maintainers@lists.alioth.debian.org>
Changed-By: Benjamin Drung <bdr...@debian.org>
Description:
 mozilla-devscripts - Development scripts used by Mozilla's addons packages
Closes: 808713
Changes:
 mozilla-devscripts (0.43) unstable; urgency=medium
 .
   * install-xpi: sort file list in preferences files to make package builds
     reproducible. Thanks to Reiner Herrmann (Closes: #808713)
Checksums-Sha1:
 ae9dba33b37ad81f91b0e81cb03bdc642b55b926 1755 mozilla-devscripts_0.43.dsc
 33d323b879935e9563ab8ae30c45aba0bad242d6 39256 mozilla-devscripts_0.43.tar.xz
 546b10ce62c45e8b85cad7a37f4a8e4923e15170 39392 mozilla-devscripts_0.43_all.deb
Checksums-Sha256:
 ac16169d6ac0406cc41854384a98fd7556584dd225935851f5d647e2d05a1328 1755 
mozilla-devscripts_0.43.dsc
 850bc5e3d6b86cbdf45ddf27dc87eaa18d2e95e9e10776ec8ce78dee6aa8ed44 39256 
mozilla-devscripts_0.43.tar.xz
 120e254873f95979dc2e63ac0f139142be6086f43ffabf88ac68a4ec9ab98e19 39392 
mozilla-devscripts_0.43_all.deb
Files:
 f31be8015df81741e54a55ad7e02e514 1755 devel optional 
mozilla-devscripts_0.43.dsc
 7e567259464a8f3ad64e8e9395a42c28 39256 devel optional 
mozilla-devscripts_0.43.tar.xz
 ca69fe157993c4a5c360102dc2791ed2 39392 devel optional 
mozilla-devscripts_0.43_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCgAGBQJWlXmZAAoJEBWetcTvyHdMqZcP/iLaYa0odm6YOlsRsu7AnnYt
6CDL/chTBe+djrGLv/MZZurQjQhzBue89zZtqSDQl5WStzPRtSjBc7YkH2aU58Gz
Nq4+cy/IQCQDcbAguNpe/Xe/nKsgLGVRZf2d0ylUp88CRaqGl4srd/LM0ymlhYAV
I56RqluoJsh4kvnEVJR/iQsym0uqOVLIymUJLqY71MIBgVDr4DYeplKoUfvwWFUb
+elWbOAPSqRint78B8rJI9y/BbFhNtX6PddXQcgURzQ+VUiUrtnkpzo3jndrC5bE
iDxDAMA1GKKkpcQEiaIXttkdZIXTXHODtNFTe/2zePa8CJgtYmpWtna+zFlnyqZ+
LN+vt0wFYDeTvWCY8ma9nATGWNHvtYkjSW9dI98J4VyKdy/XBZtpmkvFLyoj/QRm
cvSjRAbOuvt6FhJKyaqqukcZrVIDrl1gmNY7GYpiWF0LQbzvQhA8q3QaG02UWg1A
0EcFVR8/7CVdaGGFiuw4lnyAwH49bOkgcwFMAbnasNXmrTc5E6emuWYt4gattwYm
j/6r/h1sHNbhv1mVGTGG2E1fiZm9GwYtZbKmS0H/zi0NXiGRoasJwiQy7BXIY9cH
8LXdSftmWqgmn0HKtzQbxcHkyoJIfZxMjEWUyU0/GN0Zc/4DZ18M2e5eeqZKrsFJ
eHGH4V/FW+LjwTCsyqFb
=PBAw
-----END PGP SIGNATURE-----

--- End Message ---
_______________________________________________
Pkg-mozext-maintainers mailing list
Pkg-mozext-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-mozext-maintainers

Reply via email to