Your message dated Sun, 03 May 2026 20:55:33 +0000
with message-id <[email protected]>
and subject line Bug#1061115: fixed in ksh93u+m 1.0.10-3
has caused the Debian Bug report #1061115,
regarding ksh93u+m: please configure a static CHILD_MAX value at build-time
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1061115: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1061115
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: ksh93u+m
Severity: wishlist
User: [email protected]
Usertags: randomness
Dear Maintainer,
I'm an occasional volunteer with the Reproducible Builds[1] project, and
noticed recently that the ksh93u+m Debian package failed build reproducibility
testing[2] on amd64.
The autoconfiguration script[3] probes the build host for the user process
limit CHILD_MAX[4] - and the resulting value is compiled-into the /bin/ksh93
binary. This means that the binary package varies (is non-reproducible) on
build hosts that have different process limits configured.
Some additional notes / context to help figuring out a suitable value:
* The CHILD_MAX setting is a limit to the number of (sub)processes that a
user is allowed to run simultaneously.
* The compiled-in ksh93 CHILD_MAX value is only read if the _runtime_ system
getconf call[5] returns a zero/negative value (unlimited?).
* A zero or negative CHILD_MAX value seems unacceptable because it could
result in an inifinite loop[6] in the jobs.c code.
* The default value[7] of 1024 was introduced in the AT&T-distributed source
some time between Y2007 and Y2011 - it may still be an acceptable value.
* At the time of writing, the most recent Debian amd64 binary package for
source version ksh93u+m/1.0.7-1 has a compiled-in CHILD_MAX of 31626.
Regards,
James
[1] - https://www.reproducible-builds.org
[2] -
https://tests.reproducible-builds.org/debian/rb-pkg/unstable/arm64/ksh93u+m.html
[3] -
https://sources.debian.org/src/ksh93u%2Bm/1.0.7-1/src/lib/libast/comp/conf.sh/
[4] -
https://sources.debian.org/src/ksh93u%2Bm/1.0.7-1/src/lib/libast/comp/conf.tab/#L67
Note: this file's header explains each character in the line's "CDLMUX".
[5] -
https://sources.debian.org/src/ksh93u%2Bm/1.0.7-1/src/cmd/ksh93/sh/init.c/#L1274
[6] -
https://sources.debian.org/src/ksh93u%2Bm/1.0.7-1/src/cmd/ksh93/sh/jobs.c/#L1832-L1833
[7] -
https://sources.debian.org/src/ksh93u%2Bm/1.0.7-1/src/cmd/ksh93/sh/init.c/#L153-L155
--- End Message ---
--- Begin Message ---
Source: ksh93u+m
Source-Version: 1.0.10-3
Done: Anuradha Weeraman <[email protected]>
We believe that the bug you reported is fixed in the latest version of
ksh93u+m, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Anuradha Weeraman <[email protected]> (supplier of updated ksh93u+m package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 04 May 2026 12:45:10 +0530
Source: ksh93u+m
Architecture: source
Version: 1.0.10-3
Distribution: unstable
Urgency: medium
Maintainer: Anuradha Weeraman <[email protected]>
Changed-By: Anuradha Weeraman <[email protected]>
Closes: 1061115
Changes:
ksh93u+m (1.0.10-3) unstable; urgency=medium
.
* Make builds reproducible by hardcoding CHILD_MAX in conf.tab to
skip conf.sh's build-host getconf probe (Closes: #1061115).
* Bumped up standards version.
* Updated debian/watch to version 5 format.
Checksums-Sha1:
d564d54d991935ecb3173cc60ae38160824c3a6c 1935 ksh93u+m_1.0.10-3.dsc
5d93d4b817790af672d9a3e81b08e1ca05c5d268 2019536 ksh93u+m_1.0.10.orig.tar.gz
4d77e3d3669aca5263a6a81d22faeb6b8bab99c5 15820 ksh93u+m_1.0.10-3.debian.tar.xz
67ab6d44b22b6fac002c870f8490376f7532b0ea 6264 ksh93u+m_1.0.10-3_arm64.buildinfo
Checksums-Sha256:
8d1dd5895b22c42efc5fa5adecf210d35d03012c21f308f8707b0582020285a6 1935
ksh93u+m_1.0.10-3.dsc
9f4c7a9531cec6941d6a9fd7fb70a4aeda24ea32800f578fd4099083f98b4e8a 2019536
ksh93u+m_1.0.10.orig.tar.gz
95fdaf5c3dd8a3b60985528dc749d70a01ead8d6775b6f61d1bb7c54aaae8482 15820
ksh93u+m_1.0.10-3.debian.tar.xz
658722d4a61f5f951cff863ae0120ed0a8af2a01fede4b7681b6fe3180da7513 6264
ksh93u+m_1.0.10-3_arm64.buildinfo
Files:
44b1058e6b61bcd1c1ad4ec4ce141aa9 1935 shells optional ksh93u+m_1.0.10-3.dsc
baf3065175bf0204f8b35a3ac9ea39fd 2019536 shells optional
ksh93u+m_1.0.10.orig.tar.gz
34f3e50a0594b84542cb371b7c948978 15820 shells optional
ksh93u+m_1.0.10-3.debian.tar.xz
62226c94230fd9ad19aefa558c350f0a 6264 shells optional
ksh93u+m_1.0.10-3_arm64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEE9WuPFOAUze9dBH/BY221odkYYP0FAmn3n5AACgkQY221odkY
YP0bOQ//Xe7w1Jn9RlPnGA83QS/CYyuF7Y0CjhVh3r4Qpvgg0YZF/5Oq6Yt+bORz
TiQGSvJXm1r/uoEufVcuckZBOljnNoHd5tvsmiebr9j058uz38kZscABHzgNcxn6
KqmeCEUKWhnpzVKaJH0ibCc36xh99PrEUbWCSl3/HvMtvUoKQBK0faMiw+33+KzC
Tcc91oe1iLiOGY6K7NxzfFIIofPrRPXmunLYpO2hM9wQnln85tXPf/bkXhSKg4an
c5zl7wk6bPbKHIsF0eCUQW/6eqnV8bkQa/nXQgOSdTbNSMBx6Mzkmq/xTL+mZgdR
YHBKvBHOjM45V0A7zdmONMKS+5DfAmbHeY0yNuBbAvIIuWBjFg22nqpw/WAX8PV+
9JumjCRfAxav9QfhW/54ngmk27NlReuvrZTeCx/IGkBrZLWHkJJTlu2fWTjRpE/C
IQVXWaw5sfZdbeAu3KUlKLjwQKr3PIyx2/F9qOGb/cYqBBuG6pDkqlTwOSMp0TpS
PbD8wxoMH8CHT8TgmTn1SLhfF27eCFEefp/gWmueRc2/sNrGjRKZD2KeZIn9bspb
udJCCRcws8ISAZpFm6fwG7j1o0i0AycCQwT3Osvk0VbXuyPuT1AC0KHw7ZZlpf1x
mxpShiV03IF18keF1Nec9YEV2QZcaa+jOtztNSb8yICjfx1pODQ=
=oLqu
-----END PGP SIGNATURE-----
pgpnkxYI6pDsk.pgp
Description: PGP signature
--- End Message ---
