Your message dated Sun, 27 Nov 2022 18:38:06 +0000
with message-id <[email protected]>
and subject line Bug#1020805: fixed in png23d 1.10-1.3
has caused the Debian Bug report #1020805,
regarding png23d: reproducible-builds: Embedded build paths in binaries
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1020805: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1020805
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: png23d
Severity: normal
Tags: patch
User: [email protected]
Usertags: buildpath
X-Debbugs-Cc: [email protected]
The build path is embedded in /usr/bin/png23d:
https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/png23d.html
/build/1st/png23d-1.10/png23d.c:32
vs.
/build/2/png23d-1.10/2nd/png23d.c:32
The attached patch to to the upstream Makefile fixes this by adding
-ffile-prefix-map to CFLAGS.
According to my local tests, with this patch applied png23d should
build reproducibly on tests.reproducible-builds.org!
Thanks for maintaining png23d!
live well,
vagrant
From 2f6949ace5cdbcd143b218f63e44e894dfde33de Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <[email protected]>
Date: Mon, 26 Sep 2022 23:44:26 +0000
Subject: [PATCH] Makefile: Add -ffile-prefix-map to CFLAGS to avoid embedding
the build path.
https://reproducible-builds.org/docs/build-path/
---
Makefile | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/Makefile b/Makefile
index 1a4d40b..da33e93 100644
--- a/Makefile
+++ b/Makefile
@@ -22,7 +22,7 @@ endif
OPTFLAGS=-O2
#OPTFLAGS=-O0
-CFLAGS+=$(WARNFLAGS) -MMD -DVERSION=$(VERSION) $(OPTFLAGS) -g
+CFLAGS+=$(WARNFLAGS) -MMD -DVERSION=$(VERSION) $(OPTFLAGS) -g -ffile-prefix-map=$(CURDIR)=.
LDFLAGS+=-lpng
--
2.37.2
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: png23d
Source-Version: 1.10-1.3
Done: Chris Lamb <[email protected]>
We believe that the bug you reported is fixed in the latest version of
png23d, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Chris Lamb <[email protected]> (supplier of updated png23d package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 17 Nov 2022 17:52:41 +0000
Source: png23d
Binary: png23d png23d-dbgsym
Architecture: source amd64
Version: 1.10-1.3
Distribution: unstable
Urgency: medium
Maintainer: Vincent Sanders <[email protected]>
Changed-By: Chris Lamb <[email protected]>
Description:
png23d - Converts PNG images into three dimensional representations.
Closes: 1020805
Changes:
png23d (1.10-1.3) unstable; urgency=medium
.
* Non-maintainer upload.
* Apply a patch by Vagrant Cascadian to make the build reproducible.
(Closes: #1020805)
Checksums-Sha1:
4e4de792b5ffe7f325b7f2625781d4e20bf69f5f 1710 png23d_1.10-1.3.dsc
010ab1005ec558bd8e1029261eec3e428a9e859b 849907 png23d_1.10.orig.tar.gz
471621f26e3a89d4779677f08c4a4d9b1ae92aaa 3420 png23d_1.10-1.3.debian.tar.xz
006ab37dfbaf68d161847036c89d65282542e1c9 44132 png23d-dbgsym_1.10-1.3_amd64.deb
adba39aef94271c6d668b3e5f56f9bafff788c97 6015 png23d_1.10-1.3_amd64.buildinfo
d1308e5a89c7d89a06824d94d59925a9926d03c3 23736 png23d_1.10-1.3_amd64.deb
Checksums-Sha256:
7b0b8f28c2c5db57a2650b48eab29e7e87620f65483893ca6197c0d01c93478e 1710
png23d_1.10-1.3.dsc
22ddc4d2904f7ab42139175f4f0884d789cf456d1adae6fdc62b01e398efdb25 849907
png23d_1.10.orig.tar.gz
4449bed870a75861415ee349af8bafda089983cf654f813d8d77713cd7a914f0 3420
png23d_1.10-1.3.debian.tar.xz
d432f53122c9ca072fcca1cbccf73ab2514dc4f4ebd10237cc54c3e60e21e79d 44132
png23d-dbgsym_1.10-1.3_amd64.deb
7da92b171c3322c06bb55475e7f076f3adc03db9080621cc5f2c575d84c706ba 6015
png23d_1.10-1.3_amd64.buildinfo
6ce02c051103c55fcb753467b0bc83fa1dc0cbe92e9b171f1fda251348d91285 23736
png23d_1.10-1.3_amd64.deb
Files:
07093802055acd9e1556b1abfc3f8553 1710 graphics optional png23d_1.10-1.3.dsc
1f8049229e2f7b2f8c95b161ae3296ab 849907 graphics optional
png23d_1.10.orig.tar.gz
21b29f3f560173f75e3705a5bacf8c7d 3420 graphics optional
png23d_1.10-1.3.debian.tar.xz
732e91cc07a5dbb76df361db27862567 44132 debug optional
png23d-dbgsym_1.10-1.3_amd64.deb
bd6471423872f12fb80fc1652d077257 6015 graphics optional
png23d_1.10-1.3_amd64.buildinfo
86e7325eca216d12f2c6c6f79fae1f86 23736 graphics optional
png23d_1.10-1.3_amd64.deb
-----BEGIN PGP SIGNATURE-----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=lvxl
-----END PGP SIGNATURE-----
--- End Message ---
