Debian Bug report logs - #842988
masscan: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Reiner Herrmann <reiner@reiner-h.de>

To: submit@bugs.debian.org

Subject: masscan: please make the build reproducible

Date: Wed, 2 Nov 2016 20:55:44 +0100

[Message part 1 (text/plain, inline)]

Source: masscan
Version: 2:1.0.3-104-g676635d~ds0-1
Severity: wishlist
Tags: patch upstream
User: reproducible-builds@lists.alioth.debian.org
Usertags: fileordering
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi!

While working on the "reproducible builds" effort [1], we have noticed
that masscan could not be built reproducibly.
It links objects in non-deterministic order.

The attached patch fixes this by sorting the list of source files.

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds

[masscan.patch (text/x-diff, attachment)]

[signature.asc (application/pgp-signature, inline)]

Message #14 received at 842988-close@bugs.debian.org (full text, mbox, reply):

From: Sophie Brun <sophie@freexian.com>

To: 842988-close@bugs.debian.org

Subject: Bug#842988: fixed in masscan 2:1.0.5+ds1-1

Date: Thu, 28 Jun 2018 14:18:17 +0000

Source: masscan
Source-Version: 2:1.0.5+ds1-1

We believe that the bug you reported is fixed in the latest version of
masscan, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 842988@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sophie Brun <sophie@freexian.com> (supplier of updated masscan package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 28 Jun 2018 11:19:24 +0200
Source: masscan
Binary: masscan
Architecture: source
Version: 2:1.0.5+ds1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Security Tools <team+pkg-security@tracker.debian.org>
Changed-By: Sophie Brun <sophie@freexian.com>
Description:
 masscan    - TCP port scanner
Closes: 842988 901596
Changes:
 masscan (2:1.0.5+ds1-1) unstable; urgency=medium
 .
   [ Sophie Brun ]
   * Remove get-git-source.sh
   * New upstream version 1.0.5+ds1 (Closes: #901596)
       - fixes reproducible build (Closes: #842988)
   * Taking over the maintenance of package with Alessio
     Treglia's permission. Thank you to him for the work
     on the package.
   * Remove old gbp.conf
   * Add missing build-dep clang
   * Update date in d/copyright
   * Fix details in d/copyright for lintian
   * Use debhelper 11
   * Refresh patch
   * Add a patch fix-spelling-errors
   * d/rules: add build hardening
   * Bump Standards-Version to 4.1.4: no change required
 .
   [ Raphaël Hertzog ]
   * Try to manually enable PIE compilation since clang does not enable it by
     default.
Checksums-Sha1:
 08a54b95b895cf50d0ee27ad185facf2d3ee36f2 1650 masscan_1.0.5+ds1-1.dsc
 f21759d5146bbffbc37a61a3c8d30d74aab5e44e 337492 masscan_1.0.5+ds1.orig.tar.gz
 c770eef69b33cb639ff074f4dc156e335cfb7ebb 15268 masscan_1.0.5+ds1-1.debian.tar.xz
 bc73700687dd21d5baad76673d56654861bf4ae3 5811 masscan_1.0.5+ds1-1_source.buildinfo
Checksums-Sha256:
 0a77b33ca671850bd37e399b45eef5095a2823e861a05ed48c6a6625e6b10c24 1650 masscan_1.0.5+ds1-1.dsc
 3385690662bd891860d7f56cd8f5741cfd4149630b51a1b2e738c8b5785ee8cd 337492 masscan_1.0.5+ds1.orig.tar.gz
 2a5f3dc406a50bef0d0882cc8ef5047565dd65bc15e8d37cc5bb69ea5c4273fa 15268 masscan_1.0.5+ds1-1.debian.tar.xz
 9baa997ab149f02165dc364afa7e3874864c0b3e2eeda1db508a26a318e8fd5d 5811 masscan_1.0.5+ds1-1_source.buildinfo
Files:
 fab7eb013e2207d36b8dae0b8db490fa 1650 net optional masscan_1.0.5+ds1-1.dsc
 932119ee27429ee7ce50db9c1c99fe99 337492 net optional masscan_1.0.5+ds1.orig.tar.gz
 01827a409aba487ae6dca71bb40d0117 15268 net optional masscan_1.0.5+ds1-1.debian.tar.xz
 811a6f3e544d98eae3e3bf708a5b2596 5811 net optional masscan_1.0.5+ds1-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
Comment: Signed by Raphael Hertzog

iQEzBAEBCgAdFiEE1823g1EQnhJ1LsbSA4gdq+vCmrkFAls06egACgkQA4gdq+vC
mrkBLwf/X2hSRBFUG1t+V9iVSb4FVWQ3HUl+WmaLbHS7yzrQh2tTcnzLW98/6OPv
XvJtHhi6TwBpjAiKzv8/Bl/YCH3JY3Vbr2zOrG7gkRufurme7Bj9pOm9REcwNYs2
XJ18sVBYeG0/w7OXfAeDQ9hTkzPYy4xdFSN2VHWjAEdb5Ge6HFCfGMADmRpzd0H7
rlxw/SA+F3YR250kN4D2wJ0dM5VQAqAVwmuNlaUdyl6Ta24m5shUnPIukiyBao02
fawTKY5Aii428BLwrevVuPQ5zisPmR0q89EZnU1KVfcnT5VXEl2JsuUzrmFeCknZ
ho0NaFy7GTS7pu6bvuiqPjMy0PUi+g==
=lbLW
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.