New submission from Wayland Zhong:
When I build python (version 2.7.13), I find the build results are different
every time. It seems to be caused by some times tamps, and they may be
generated by the code below:
Lib/py_compile.py:106: with open(file, 'U') as f:
Lib/py_compile.py:107: try:
Lib/py_compile.py:108: timestamp =
long(os.fstat(f.fileno()).st_mtime)
Lib/py_compile.py:109: except AttributeError:
Lib/py_compile.py:110: timestamp = long(os.stat(file).st_mtime)
Lib/py_compile.py:111: codestring = f.read()
As we know, reproducible build is a good way to counter malicious attacks that
generate malicious executables, by making it easy to recreate the executable to
determine if the result is correct. How can I eliminate the differences caused
by the time stamps? Just remove some code? Or is there any configuration?
If we can't eliminate the difference now, can lsof support it in future
versions?
Thank you.
----------
components: Library (Lib)
messages: 301042
nosy: WaylandZ
priority: normal
severity: normal
status: open
title: Build differences caused by the time stamps
type: security
versions: Python 2.7
_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue31312>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe:
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
