Re: More info about nondeterminism_added_by_pyqt5_pyrcc5

2017-08-16 Thread Ximin Luo
Federico Brega: > Hello, > > I'm packaging an application making use of pyrcc5 and I noticed the > nondeterminism it adds. > I see[1] that this is currently description is not correct. > You can see that pyrcc5 uses QHash, which is made to avoid algorithmic > complexity attacks[2] > introducing a

Re: More info about nondeterminism_added_by_pyqt5_pyrcc5

2017-08-15 Thread Federico Brega
> Probably best to file that directly with the offending package and set > the various "usertags" so we can track it: > >https://wiki.debian.org/ReproducibleBuilds/Contribute#How_to_report_bugs I reported the bug to pyqt5-dev-tools [1], as it is generating the issue, even if it builds

Re: More info about nondeterminism_added_by_pyqt5_pyrcc5

2017-08-14 Thread Chris Lamb
Dear Federico, > There are two possible solutions[2]: set the environment variable > QT_HASH_SEED to a constant value before > pyrcc5 is called (this is my current workaround) or call > qSetGlobalQHashSeed(). > > I can help with the implementation if needed. Neat! Please do so. :) Probably

More info about nondeterminism_added_by_pyqt5_pyrcc5

2017-08-14 Thread Federico Brega
Hello, I'm packaging an application making use of pyrcc5 and I noticed the nondeterminism it adds. I see[1] that this is currently description is not correct. You can see that pyrcc5 uses QHash, which is made to avoid algorithmic complexity attacks[2] introducing a randomization. There are two