Source: strip-nondeterminism Version: 0.013-1 Severity: normal I've got an error here on dh_strip_nondeterminism, it's from the buildlog of afl/1,94b-2 (unreleased), the tried-to-processed file is debian/afl/usr/share/doc/afl/vuln_samples/unzip-t-mem-corruption.zip [1]:
<buildlog> dh_strip_nondeterminism substr outside of string at /usr/share/perl5/File/StripNondeterminism/handlers/zip.pm line 113. Use of uninitialized value in unpack at /usr/share/perl5/File/StripNondeterminism/handlers/zip.pm line 113. IO error: reading local extra field : at /usr/bin/dh_strip_nondeterminism line 87. Can't write to /tmp/dwjyFRebW6.zip at /usr/share/perl5/Archive/Zip/Archive.pm line 440. Archive::Zip::Archive::overwrite(Archive::Zip::Archive=HASH(0xf9eb48)) called at /usr/share/perl5/File/StripNondeterminism/handlers/zip.pm line 160 File::StripNondeterminism::handlers::zip::normalize("debian/afl/usr/share/doc/afl/vuln_samples/unzip-t-mem-corrupt"...) called at /usr/bin/dh_strip_nondeterminism line 87 eval {...} called at /usr/bin/dh_strip_nondeterminism line 87 </buildlog> Note: docs/vuln_samples/ is a special collection of files triggering vulnerabilities (the filename already says it), maybe this shows something which could be improved. Best, DS [1] https://packages.debian.org/sid/amd64/afl/filelist -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages libfile-stripnondeterminism-perl depends on: ii libarchive-zip-perl 1.53-1 ii perl 5.20.2-6 libfile-stripnondeterminism-perl recommends no packages. libfile-stripnondeterminism-perl suggests no packages. -- no debconf information _______________________________________________ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds