Debian Bug report logs - #825088
proj: please make nad2bin output reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Alexis Bienvenüe <pado@passoire.fr>

To: submit@bugs.debian.org

Subject: proj: please make nad2bin output reproducible

Date: Mon, 23 May 2016 15:38:15 +0200

[Message part 1 (text/plain, inline)]

Source: proj
Version: 4.9.2-2
Severity: wishlist
Tags: patch upstream
User: reproducible-builds@lists.alioth.debian.org
Usertags: toolchain
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Dear Maintainer,

While working on the “reproducible builds” effort [1], we have noticed
that the nad2bin binary has unreproducible output, as it includes
uninitialized memory state when CTABLE.id's length is less than the
available 80 bytes.

See the attached patch for a proposed solution.

Regards,
Alexis Bienvenüe.

[1] https://wiki.debian.org/ReproducibleBuilds

[nad2bin-reproducible-header.patch (text/x-patch, attachment)]

Message #12 received at 825088@bugs.debian.org (full text, mbox, reply):

From: Sebastiaan Couwenberg <sebastic@xs4all.nl>

To: Alexis Bienvenüe <pado@passoire.fr>, 825088@bugs.debian.org

Subject: Re: Bug#825088: proj: please make nad2bin output reproducible

Date: Mon, 23 May 2016 22:23:25 +0200

Control: tags -1 pending

Hi Alexis,

Thanks for the patch, I've included in the package and forwarded it
upstream who quickly applied it too.

The updated package will be uploaded to unstable soon.

Kind Regards,

Bas

-- 
 GPG Key ID: 4096R/6750F10AE88D4AF1
Fingerprint: 8182 DE41 7056 408D 6146  50D1 6750 F10A E88D 4AF1

Message #19 received at 825088-close@bugs.debian.org (full text, mbox, reply):

From: Bas Couwenberg <sebastic@debian.org>

To: 825088-close@bugs.debian.org

Subject: Bug#825088: fixed in proj 4.9.2-3

Date: Mon, 23 May 2016 22:22:23 +0000

Source: proj
Source-Version: 4.9.2-3

We believe that the bug you reported is fixed in the latest version of
proj, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 825088@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Bas Couwenberg <sebastic@debian.org> (supplier of updated proj package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 23 May 2016 22:34:18 +0200
Source: proj
Binary: proj-data libproj9 libproj-dev proj-bin libproj-java
Architecture: source amd64 all
Version: 4.9.2-3
Distribution: unstable
Urgency: medium
Maintainer: Debian GIS Project <pkg-grass-devel@lists.alioth.debian.org>
Changed-By: Bas Couwenberg <sebastic@debian.org>
Description:
 libproj-dev - Cartographic projection library (development files)
 libproj-java - Cartographic projection library (JNI bindings)
 libproj9   - Cartographic projection library
 proj-bin   - Cartographic projection library (tools)
 proj-data  - Cartographic projection filter and library (datum package)
Closes: 809690 825088
Changes:
 proj (4.9.2-3) unstable; urgency=medium
 .
   * Update Homepage URL for move to GitHub.
   * Bump Standards-Version to 3.9.8, no changes.
   * Add patch by Alexis Bienvenüe to make nad2bin output reproducible.
     (closes: #825088)
   * Enable all hardening buildflags.
   * Add patch to add a BUGS section to the manpages & update old URLs.
     (closes: #809690)
Checksums-Sha1:
 8be43d5672224af815e55e87e3be16ee1a571d3f 2199 proj_4.9.2-3.dsc
 b6193dd47bde23c10184698d331627191dceaa7c 9037336 proj_4.9.2-3.debian.tar.xz
 0fec0fd70b7e6108258f552e465a5e06ae9b1a26 211728 libproj-dev_4.9.2-3_amd64.deb
 6c30984eea266344a9172007d85a4c966d429d78 104028 libproj-java_4.9.2-3_amd64.deb
 3116e0ca8c032f8d9583834d44ef0a383839287a 309310 libproj9-dbgsym_4.9.2-3_amd64.deb
 f44dfd01695048f9391241e7c0d8a3f52f53b3cb 167434 libproj9_4.9.2-3_amd64.deb
 2f6894d487f8f54b321b71f58f54d9fc19f46aba 51274 proj-bin-dbgsym_4.9.2-3_amd64.deb
 10a57442fd2a3023f7f606d26396873dd6aebaa8 58324 proj-bin_4.9.2-3_amd64.deb
 5ac6c15d03169bdfb9c393aac475d69b09685bae 4057828 proj-data_4.9.2-3_all.deb
Checksums-Sha256:
 1c8721cf9be07be2cf77725fafddba70e8fa285d1713167f36128d6d25a8d584 2199 proj_4.9.2-3.dsc
 bdb425cf974a76542235c115011c2b9401e55e7f3f9b4283976059c2b022fa4d 9037336 proj_4.9.2-3.debian.tar.xz
 7ace17f4fa42c27d2b0d0fb93407ed0c49ffc6a7dc456ab1bbdc80b8ca89d269 211728 libproj-dev_4.9.2-3_amd64.deb
 b9fd8c0a8ab0116f3effc5842984daf32921a9986ac6ef01af003128c7498ee7 104028 libproj-java_4.9.2-3_amd64.deb
 2160d9a004358cb29f34f5cbfeea820b577e9cf7d85255b3d8f29e0b048f5c5e 309310 libproj9-dbgsym_4.9.2-3_amd64.deb
 0de26175c3159dd9829896afaf42440b8768b7af3803221023eae6ca087c3486 167434 libproj9_4.9.2-3_amd64.deb
 473787e06385afcaeb1af3fa9510fa31745a19e49d7733c4625def852a1aca6b 51274 proj-bin-dbgsym_4.9.2-3_amd64.deb
 64bf84536622a4c9f2059c409601861de03d2b80af0f3eed7a4f190fd55f82de 58324 proj-bin_4.9.2-3_amd64.deb
 1f87cc94b405cd1f8ef671e73cefb24a12e5ca7f295cb5a6371f5607a215440b 4057828 proj-data_4.9.2-3_all.deb
Files:
 f2899401b330178809dca064a148c9d5 2199 science optional proj_4.9.2-3.dsc
 c77435b1497e515f8be20a8efa2d1b13 9037336 science optional proj_4.9.2-3.debian.tar.xz
 3e2ffb3fb77da9c3b20ef01e2c87657c 211728 libdevel optional libproj-dev_4.9.2-3_amd64.deb
 f1b845ae057d2f9c2b5186b4040e136c 104028 java optional libproj-java_4.9.2-3_amd64.deb
 a60b2f07c9d6c2c4182a950986aa711e 309310 debug extra libproj9-dbgsym_4.9.2-3_amd64.deb
 e25fa0427dfbbf9471b69be70283984d 167434 libs optional libproj9_4.9.2-3_amd64.deb
 7feb03b9f026c9c210158d6b25598aa3 51274 debug extra proj-bin-dbgsym_4.9.2-3_amd64.deb
 795669b631babfc003089cb12a259511 58324 science optional proj-bin_4.9.2-3_amd64.deb
 7ce1db9577553fae3addf44bcb373e9c 4057828 libs optional proj-data_4.9.2-3_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCgAGBQJXQ3QjAAoJEGdQ8QrojUrxVn0P/3hAjMirQkXs1pBOvGF+hVaV
Ytgg3gbn7DtMjCqWwxblV7svw3hURIMCxlAHJxiGMtsrBb0BfuJMVrs5ZI2C3rYp
rLgks8xKjbTAEflXEFVUSOUIe9jwAzbkYAFQs5qCceUMNNY+aPxWFY0fl3NQfk1O
FtNQvD8EbMBRQ2C5UE+jJ5HXYDO1a2GThZhKaBtjL3lIRAf85TkvE9fk5m/pZxmE
hj1x/dV7zKUnPZQqvue55z09QEa9AZV9y8aKWVwHflZpYpJ5Y619AKdQHMJhEAxd
ca77S0CpNzY/V5GHsMZ8B+BC+37RWV6EvoVh1tWVbHxqPXrX6czFC5nK+YVW3yCP
3Z22vcPEpsytME/0OuRczrutfs4IH5rZtJkD03IgaXl/e69eJZ/aWNQbWEeF+668
oOVzy28CpjNkpmqYAap5AF8C1onADkhgdKXM3weSbLznu73R0nQkEKdCkk/0HKZs
mPcUJ4xJUIH/8jiB5KoB9jApy8E6yeEJHlSazGCiS+40WzgHGBxjQC6p6uTNxtVb
6N8ucXkciwdKrmLho9JnBm+LvpvnhWkFP90JrBgVANw8FFLqsl1US68ZvUnAgmgY
VyYoGIn41iz2D6NZfBMn3rk5gtrr8uQ5tI8lB3a0A5ce8uzYb2kaBP80qay1y8cv
1mfLHQ0FY3+wPcd/k3xT
=h9Ji
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.