847033">

Debian Bug report logs - #847033
newlib: please make the build reproducible (locale)

version graph

Package: src:newlib; Maintainer for src:newlib is Debian GCC Maintainers <debian-gcc@lists.debian.org>;

Reported by: Dafydd Harries <daf@debian.org>

Date: Mon, 5 Dec 2016 01:24:02 UTC

Severity: wishlist

Tags: patch

Found in version newlib/2.2.0+git20150830.5a3d536-1

Fixed in version newlib/2.4.0.20160527-1

Done: Agustin Henze <tin@debian.org>

Bug is archived. No further changes may be made.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Agustin Henze <tin@debian.org>:
Bug#847033; Package src:newlib. (Mon, 05 Dec 2016 01:24:04 GMT) (full text, mbox, link).


Acknowledgement sent to Dafydd Harries <daf@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Agustin Henze <tin@debian.org>. (Mon, 05 Dec 2016 01:24:04 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Dafydd Harries <daf@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: newlib: please make the build reproducible (locale)
Date: Mon, 05 Dec 2016 01:21:18 +0000
[Message part 1 (text/plain, inline)]
Source: newlib
Version: 2.2.0+git20150830.5a3d536-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: locale

Hi!

While working on the “reproducible builds” effort [1], we have noticed
that newlib could not be built reproducibly.

In particular, the order in which object files get added to archives is
not deterministic. I think the problem is that the locale affects how
the shell sorts filenames.

I've attached two patches. The first modifies Makefile.am files to use
LC_ALL=C when adding members to archives, and as such is suitable for
sending upstream. The second is the equivalent change for Makefile.in,
and us such is suitable for applying to the Debian package (since it
does not invoke automake).

Regards,

Daf

 [1]: https://wiki.debian.org/ReproducibleBuilds
[newlib-locale-Makefile.am.diff (text/x-diff, attachment)]
[newlib-locale-Makefile.in.diff (text/x-diff, attachment)]

Reply sent to Agustin Henze <tin@debian.org>:
You have taken responsibility. (Fri, 09 Dec 2016 16:33:16 GMT) (full text, mbox, link).


Notification sent to Dafydd Harries <daf@debian.org>:
Bug acknowledged by developer. (Fri, 09 Dec 2016 16:33:16 GMT) (full text, mbox, link).


Message #10 received at 847033-close@bugs.debian.org (full text, mbox, reply):

From: Agustin Henze <tin@debian.org>
To: 847033-close@bugs.debian.org
Subject: Bug#847033: fixed in newlib 2.4.0.20160527-1
Date: Fri, 09 Dec 2016 16:31:16 +0000
Source: newlib
Source-Version: 2.4.0.20160527-1

We believe that the bug you reported is fixed in the latest version of
newlib, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 847033@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Agustin Henze <tin@debian.org> (supplier of updated newlib package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 09 Dec 2016 11:45:41 -0300
Source: newlib
Binary: libnewlib-dev libnewlib-doc libnewlib-arm-none-eabi newlib-source
Architecture: source all
Version: 2.4.0.20160527-1
Distribution: unstable
Urgency: medium
Maintainer: Agustin Henze <tin@debian.org>
Changed-By: Agustin Henze <tin@debian.org>
Description:
 libnewlib-arm-none-eabi - C library and math library compiled for bare metal using Cortex A
 libnewlib-dev - C library and math library intended for use on embedded systems
 libnewlib-doc - C library and math library intended for use on embedded systems (
 newlib-source - C library and math library intended for use on embedded systems (
Closes: 847033
Changes:
 newlib (2.4.0.20160527-1) unstable; urgency=medium
 .
   [ Philippe Mathieu-Daudé ]
   * Imported Upstream version 2.4.0.20160527
 .
   [ Agustin Henze ]
   * Make the build reproducible (locale) (Closes: #847033)
Checksums-Sha1:
 37cdacfc159545856c325289fca4b60870e20c3e 2199 newlib_2.4.0.20160527-1.dsc
 d4202edb39633f1529622294d946e3e23999b436 5169820 newlib_2.4.0.20160527.orig.tar.xz
 91a7c5f437da5709ed927062c84989c6220198bc 12488 newlib_2.4.0.20160527-1.debian.tar.xz
 c96aaa591f9bc77e3be03e16cd15fbbd75c718bb 12475924 libnewlib-arm-none-eabi_2.4.0.20160527-1_all.deb
 693a7b3ec3d8e81020b247400d9c0ff897aa0b89 238122 libnewlib-dev_2.4.0.20160527-1_all.deb
 48c8635220de7ef24d1fcaf4be8c4f9d75a8cfca 289476 libnewlib-doc_2.4.0.20160527-1_all.deb
 6541886f3611eab7cd87ec585502bb17acfaadcc 5309896 newlib-source_2.4.0.20160527-1_all.deb
 c2a6f6945ef7bd5879226e4bd559bfa02fbd3c9b 6091 newlib_2.4.0.20160527-1_amd64.buildinfo
Checksums-Sha256:
 9379da4e46f21fffdd752c056284448517c7982700571ef6298e3fb4c1342bd1 2199 newlib_2.4.0.20160527-1.dsc
 7c68af5ad55bfd3daaa26e2b00557c79fe82828f89dbbe3a63c13f10c3336a09 5169820 newlib_2.4.0.20160527.orig.tar.xz
 e86a30ef6d3bafac4d7a960b04696fe22c6e2e67ef5db9f6042f892cd470005d 12488 newlib_2.4.0.20160527-1.debian.tar.xz
 b0e0d0f21cbaa18562d185cdb84761fbc2e521739c1407dca86b20cc8fab8c27 12475924 libnewlib-arm-none-eabi_2.4.0.20160527-1_all.deb
 94ed6d2d60d3b70e1298340d0832582e81f615a556bac5b51aada5cbe3cb6e56 238122 libnewlib-dev_2.4.0.20160527-1_all.deb
 6443487b81de1a0b808ea093829bc7e211d89d4769b36f246e7a0b941b72785b 289476 libnewlib-doc_2.4.0.20160527-1_all.deb
 9dacb5e8cd91def5b67535ec95a84076f31084c2c1b504a792c490a21a2b6578 5309896 newlib-source_2.4.0.20160527-1_all.deb
 1890d728dd79ff7add7ff38b4052b43279588e72cf15e04e63c39b850915ae62 6091 newlib_2.4.0.20160527-1_amd64.buildinfo
Files:
 c629497875f5ac1727121867de97c95e 2199 devel extra newlib_2.4.0.20160527-1.dsc
 34f1b919d567ecc37b274c8bd528de7d 5169820 devel extra newlib_2.4.0.20160527.orig.tar.xz
 8b55f55924e021d5e0cd518e9cff0259 12488 devel extra newlib_2.4.0.20160527-1.debian.tar.xz
 cc7a6037209607300fc3303c1cac79a6 12475924 libs extra libnewlib-arm-none-eabi_2.4.0.20160527-1_all.deb
 7c2ceb53b19d8ff0a04a35915ac21cae 238122 libdevel extra libnewlib-dev_2.4.0.20160527-1_all.deb
 5b53b485dfaa6aa0249a158ce5a61713 289476 doc extra libnewlib-doc_2.4.0.20160527-1_all.deb
 4218ea8637ce9e84f3cc5012340e1fa8 5309896 devel extra newlib-source_2.4.0.20160527-1_all.deb
 337ec76407f7c63a3af08f317b7ea83e 6091 devel extra newlib_2.4.0.20160527-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=0eKU
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Tue, 07 Feb 2017 07:29:27 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Fri Jan 31 00:27:38 2025; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.