Acknowledgement sent
to Dafydd Harries <daf@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Agustin Henze <tin@debian.org>.
(Mon, 05 Dec 2016 01:24:04 GMT) (full text, mbox, link).
Source: newlib
Version: 2.2.0+git20150830.5a3d536-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: locale
Hi!
While working on the “reproducible builds” effort [1], we have noticed
that newlib could not be built reproducibly.
In particular, the order in which object files get added to archives is
not deterministic. I think the problem is that the locale affects how
the shell sorts filenames.
I've attached two patches. The first modifies Makefile.am files to use
LC_ALL=C when adding members to archives, and as such is suitable for
sending upstream. The second is the equivalent change for Makefile.in,
and us such is suitable for applying to the Debian package (since it
does not invoke automake).
Regards,
Daf
[1]: https://wiki.debian.org/ReproducibleBuilds
Subject: Bug#847033: fixed in newlib 2.4.0.20160527-1
Date: Fri, 09 Dec 2016 16:31:16 +0000
Source: newlib
Source-Version: 2.4.0.20160527-1
We believe that the bug you reported is fixed in the latest version of
newlib, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 847033@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Agustin Henze <tin@debian.org> (supplier of updated newlib package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 09 Dec 2016 11:45:41 -0300
Source: newlib
Binary: libnewlib-dev libnewlib-doc libnewlib-arm-none-eabi newlib-source
Architecture: source all
Version: 2.4.0.20160527-1
Distribution: unstable
Urgency: medium
Maintainer: Agustin Henze <tin@debian.org>
Changed-By: Agustin Henze <tin@debian.org>
Description:
libnewlib-arm-none-eabi - C library and math library compiled for bare metal using Cortex A
libnewlib-dev - C library and math library intended for use on embedded systems
libnewlib-doc - C library and math library intended for use on embedded systems (
newlib-source - C library and math library intended for use on embedded systems (
Closes: 847033
Changes:
newlib (2.4.0.20160527-1) unstable; urgency=medium
.
[ Philippe Mathieu-Daudé ]
* Imported Upstream version 2.4.0.20160527
.
[ Agustin Henze ]
* Make the build reproducible (locale) (Closes: #847033)
Checksums-Sha1:
37cdacfc159545856c325289fca4b60870e20c3e 2199 newlib_2.4.0.20160527-1.dsc
d4202edb39633f1529622294d946e3e23999b436 5169820 newlib_2.4.0.20160527.orig.tar.xz
91a7c5f437da5709ed927062c84989c6220198bc 12488 newlib_2.4.0.20160527-1.debian.tar.xz
c96aaa591f9bc77e3be03e16cd15fbbd75c718bb 12475924 libnewlib-arm-none-eabi_2.4.0.20160527-1_all.deb
693a7b3ec3d8e81020b247400d9c0ff897aa0b89 238122 libnewlib-dev_2.4.0.20160527-1_all.deb
48c8635220de7ef24d1fcaf4be8c4f9d75a8cfca 289476 libnewlib-doc_2.4.0.20160527-1_all.deb
6541886f3611eab7cd87ec585502bb17acfaadcc 5309896 newlib-source_2.4.0.20160527-1_all.deb
c2a6f6945ef7bd5879226e4bd559bfa02fbd3c9b 6091 newlib_2.4.0.20160527-1_amd64.buildinfo
Checksums-Sha256:
9379da4e46f21fffdd752c056284448517c7982700571ef6298e3fb4c1342bd1 2199 newlib_2.4.0.20160527-1.dsc
7c68af5ad55bfd3daaa26e2b00557c79fe82828f89dbbe3a63c13f10c3336a09 5169820 newlib_2.4.0.20160527.orig.tar.xz
e86a30ef6d3bafac4d7a960b04696fe22c6e2e67ef5db9f6042f892cd470005d 12488 newlib_2.4.0.20160527-1.debian.tar.xz
b0e0d0f21cbaa18562d185cdb84761fbc2e521739c1407dca86b20cc8fab8c27 12475924 libnewlib-arm-none-eabi_2.4.0.20160527-1_all.deb
94ed6d2d60d3b70e1298340d0832582e81f615a556bac5b51aada5cbe3cb6e56 238122 libnewlib-dev_2.4.0.20160527-1_all.deb
6443487b81de1a0b808ea093829bc7e211d89d4769b36f246e7a0b941b72785b 289476 libnewlib-doc_2.4.0.20160527-1_all.deb
9dacb5e8cd91def5b67535ec95a84076f31084c2c1b504a792c490a21a2b6578 5309896 newlib-source_2.4.0.20160527-1_all.deb
1890d728dd79ff7add7ff38b4052b43279588e72cf15e04e63c39b850915ae62 6091 newlib_2.4.0.20160527-1_amd64.buildinfo
Files:
c629497875f5ac1727121867de97c95e 2199 devel extra newlib_2.4.0.20160527-1.dsc
34f1b919d567ecc37b274c8bd528de7d 5169820 devel extra newlib_2.4.0.20160527.orig.tar.xz
8b55f55924e021d5e0cd518e9cff0259 12488 devel extra newlib_2.4.0.20160527-1.debian.tar.xz
cc7a6037209607300fc3303c1cac79a6 12475924 libs extra libnewlib-arm-none-eabi_2.4.0.20160527-1_all.deb
7c2ceb53b19d8ff0a04a35915ac21cae 238122 libdevel extra libnewlib-dev_2.4.0.20160527-1_all.deb
5b53b485dfaa6aa0249a158ce5a61713 289476 doc extra libnewlib-doc_2.4.0.20160527-1_all.deb
4218ea8637ce9e84f3cc5012340e1fa8 5309896 devel extra newlib-source_2.4.0.20160527-1_all.deb
337ec76407f7c63a3af08f317b7ea83e 6091 devel extra newlib_2.4.0.20160527-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=0eKU
-----END PGP SIGNATURE-----
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Tue, 07 Feb 2017 07:29:27 GMT) (full text, mbox, link).
Debbugs is free software and licensed under the terms of the GNU General
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.