• Bug#1100018: yaramod: please make the build reproducible

    From Chris Lamb@21:1/5 to All on Mon Mar 10 12:10:02 2025
    --1fed0791cb014e49868292e091b1db26
    Content-Type: text/plain
    Content-Transfer-Encoding: 7bit

    Source: yaramod
    Version: 3.21.0-1.1
    Severity: wishlist
    Tags: patch
    User: reproducible-builds@lists.alioth.debian.org
    Usertags: filesystem
    X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

    Hi,

    Whilst working on the Reproducible Builds effort [0], we noticed that
    yaramod could not be built reproducibly.

    This is because it dynamically generated a list of modules by
    iterating over the filesystem without sorting that first, thereby
    inheriting the nondetermistic ordering of the underlying filesystem.

    Patch attached that adds a simple sorted(...) to the os.listdir
    call.

    [0] https://reproducible-builds.org/


    Regards,

    --
    ,''`.
    : :' : Chris Lamb
    `. `'` lamby@debian.org / chris-lamb.co.uk
    `-

    --1fed0791cb014e49868292e091b1db26
    Content-Disposition: attachment; filename="yaramod.diff.txt"
    Content-Type: text/plain; name="yaramod.diff.txt"
    Content-Transfer-Encoding: base64

    LS0tIGEvZGViaWFuL3BhdGNoZXMvMDAwNC1SZXByb2R1Y2libGUtYnVpbGQucGF0Y2gJMTk3 MC0wMS0wMSAwMTowMDowMC4wMDAwMDAwMDAgKzAxMDAKLS0tIGIvZGViaWFuL3BhdGNoZXMv MDAwNC1SZXByb2R1Y2libGUtYnVpbGQucGF0Y2gJMjAyNS0wMy0xMCAxMDo0Mzo1My44MDIw NDM4OTEgKzAwMDAKQEAgLTAsMCArMSwxNSBAQAorRGVzY3JpcHRpb246IE1ha2UgdGhlIGJ1 aWxkIHJlcHJvZHVjaWJsZQorQXV0aG9yOiBDaHJpcyBMYW1iIDxsYW1ieUBkZWJpYW4ub3Jn PgorTGFzdC1VcGRhdGU6IDIwMjUtMDMtMTAKKworLS0tIHlhcmFtb2QtMy4yMS4wLm9yaWcv c2NyaXB0cy9qc29uX3RvX2FycmF5LnB5CisrKysgeWFyYW1vZC0zLjIxLjAvc2NyaXB0cy9q c29uX3RvX2FycmF5LnB5CitAQCAtNTYsNyArNTYsNyBAQCBkZWYgbWFpbihhcmd2KToKKyAn JycpCisgICAgIG1vZHVsZV9uYW1lcyA9IFtdCisgCistICAgIGZvciBmaWxlIGluIG9zLmxp c3RkaXIoaW5wdXRfZGlyZWN0b3J5KToKKysgICAgZm9yIGZpbGUgaW4gc29ydGVkKG9zLmxp c3RkaXIoaW5wdXRfZGlyZWN0b3J5KSk6CisgICAgICAgICBmaWxlbmFtZSwgZXh0ZW5zaW9u ID0gb3MucGF0aC5zcGxpdGV4dChmaWxlKQorICAgICAgICAgaWYgZXh0ZW5zaW9uICE9ICIu anNvbiI6CisgICAgICAgICAgICAgY29udGludWUKLS0tIGEvZGViaWFuL3BhdGNoZXMvc2Vy aWVzCTIwMjUtMDMtMTAgMTA6Mjg6MjcuNDY4MjMwODkzICswMDAwCi0tLSBiL2RlYmlhbi9w YXRjaGVzL3NlcmllcwkyMDI1LTAzLTEwIDEwOjQzOjUyLjgzNDA0MDU0MyArMDAwMApAQCAt MSwzICsxLDQgQEAKIDAwMDEtQnVpbGQtUHl0aG9uLW1vZHVsZS10b2dldGhlci5wYXRjaAog MDAwMi1CdWlsZC1zaGFyZWQtbGlicmFyeS5wYXRjaAogMDAwMy1Vc2Utc3lzdGVtLXBhY2th Z2VzLnBhdGNoCiswMDA0LVJlcHJvZHVjaWJsZS1idWlsZC5wYXRjaAo=

    --1fed0791cb014e49868292e091b1db26--

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)