Debian Bug report logs - #947608
markdown: please make the output reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <chris@chris-lamb.co.uk>

To: submit@bugs.debian.org

Subject: markdown: please make the output reproducible

Date: Sat, 28 Dec 2019 14:27:34 +0000

[Message part 1 (text/plain, inline)]

Source: markdown
Version: 1.0.2~b8-6
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: randomness toolchain
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0] we noticed that
markdown generates output that is not reproducible.

Specifically it encodes some email addresses using random HTML
entities in an attempt to thwart spammers. A patch is attached that
seeds the random number generation with a deterministic value based on
SOURCE_DATE_EPOCH [1].

  [0] https://reproducible-builds.org/
  [1] https://reproducible-builds.org/specs/source-date-epoch/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[markdown.diff.txt (text/plain, attachment)]

Message #10 received at 947608@bugs.debian.org (full text, mbox, reply):

From: Matthew Kraai <kraai@ftbfs.org>

To: Chris Lamb <chris@chris-lamb.co.uk>, 947608@bugs.debian.org

Subject: Re: Bug#947608: markdown: please make the output reproducible

Date: Sat, 28 Dec 2019 09:05:28 -0800

Hi,

On Sat, Dec 28, 2019 at 02:27:34PM +0000, Chris Lamb wrote:
> Whilst working on the Reproducible Builds effort [0] we noticed that
> markdown generates output that is not reproducible.
> 
> Specifically it encodes some email addresses using random HTML
> entities in an attempt to thwart spammers. A patch is attached that
> seeds the random number generation with a deterministic value based on
> SOURCE_DATE_EPOCH [1].
> 
>   [0] https://reproducible-builds.org/
>   [1] https://reproducible-builds.org/specs/source-date-epoch/

Would you like me to upload this to unstable as well as experimental?

-- 
Matt

Message #15 received at 947608@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>

To: "Matt Kraai" <kraai@ftbfs.org>, 947608@bugs.debian.org

Subject: Re: Bug#947608: markdown: please make the output reproducible

Date: Sat, 28 Dec 2019 17:42:52 +0000

Hi Matthew,

> > Whilst working on the Reproducible Builds effort [0] we noticed that
> > markdown generates output that is not reproducible.
[…]
> Would you like me to upload this to unstable as well as experimental?

Very much so, thank you.


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org 🍥 chris-lamb.co.uk
       `-

Message #22 received at 947608@bugs.debian.org (full text, mbox, reply):

From: Matthew Kraai <kraai@ftbfs.org>

To: Chris Lamb <lamby@debian.org>

Cc: 947608@bugs.debian.org

Subject: Re: Bug#947608: markdown: please make the output reproducible

Date: Sat, 28 Dec 2019 11:30:13 -0800

On Sat, Dec 28, 2019 at 05:42:52PM +0000, Chris Lamb wrote:
> > > Whilst working on the Reproducible Builds effort [0] we noticed that
> > > markdown generates output that is not reproducible.
> […]
> > Would you like me to upload this to unstable as well as experimental?
> 
> Very much so, thank you.

Oops, it looks like it was already fixed by your change for #845055.

-- 
Matt

Message #27 received at 947608@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>

To: "Matt Kraai" <kraai@ftbfs.org>

Cc: 947608@bugs.debian.org

Subject: Re: Bug#947608: markdown: please make the output reproducible

Date: Sat, 28 Dec 2019 20:25:12 +0000

Hi Matthew,

> Oops, it looks like it was already fixed by your change for #845055.

Ah, so this just requires being uploaded to unstable?


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org 🍥 chris-lamb.co.uk
       `-

Message #32 received at 947608-close@bugs.debian.org (full text, mbox, reply):

From: Matthew Kraai <kraai@debian.org>

To: 947608-close@bugs.debian.org

Subject: Bug#947608: fixed in markdown 1.0.2~b8-7

Date: Sat, 28 Dec 2019 20:57:11 +0000

Source: markdown
Source-Version: 1.0.2~b8-7

We believe that the bug you reported is fixed in the latest version of
markdown, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 947608@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Matthew Kraai <kraai@debian.org> (supplier of updated markdown package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 28 Dec 2019 10:37:33 -0800
Source: markdown
Binary: markdown
Architecture: source all
Version: 1.0.2~b8-7
Distribution: experimental
Urgency: medium
Maintainer: Matt Kraai <kraai@debian.org>
Changed-By: Matthew Kraai <kraai@debian.org>
Description:
 markdown   - Text-to-HTML conversion tool
Closes: 947608
Changes:
 markdown (1.0.2~b8-7) experimental; urgency=medium
 .
   * Make output reproducible, thanks to Chris Lamb, closes: #947608.
Checksums-Sha1:
 cf869d856ef648069706a92a3f3eb85303fad2b8 1672 markdown_1.0.2~b8-7.dsc
 79d654660431704f12db39b775142ced10eee474 5899 markdown_1.0.2~b8-7.diff.gz
 f3ffb37f2be47144c64ff9415f6f414ab9952810 23988 markdown_1.0.2~b8-7_all.deb
 8908e0dfbcf5cc35d92c4001dd1c3fda20774527 4358 markdown_1.0.2~b8-7_amd64.buildinfo
Checksums-Sha256:
 8f7760b3a066492f65f53a4b3a1c491a08b73b405c15bfd39b93321be791dd87 1672 markdown_1.0.2~b8-7.dsc
 54f0ff413eb4015b62188cc03db9f7fe7f1676481f9ab9a84a18bee9abd143b9 5899 markdown_1.0.2~b8-7.diff.gz
 aba2a5d0f5c6deff3e7f525f27282fc6a2b3fec16c2b0e5800d6bd97e145e5b0 23988 markdown_1.0.2~b8-7_all.deb
 b5c9b3b89ed0de6f377d081cb7125bfc19d988f5811d4d33583236ffa24b266b 4358 markdown_1.0.2~b8-7_amd64.buildinfo
Files:
 c58787c895f573ec1413e6526806ffa2 1672 web optional markdown_1.0.2~b8-7.dsc
 eb1fef34e3d48d8270e519252e17105d 5899 web optional markdown_1.0.2~b8-7.diff.gz
 64120959724a3b814b4536378b8c03f0 23988 web optional markdown_1.0.2~b8-7_all.deb
 5f96a0f1504c81bbd385dba7f3fc821e 4358 web optional markdown_1.0.2~b8-7_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=X7k+
-----END PGP SIGNATURE-----

Message #37 received at 947608@bugs.debian.org (full text, mbox, reply):

From: Matthew Kraai <kraai@ftbfs.org>

To: Chris Lamb <lamby@debian.org>

Cc: 947608@bugs.debian.org

Subject: Re: Bug#947608: markdown: please make the output reproducible

Date: Sat, 28 Dec 2019 15:02:58 -0800

Hi,

On Sat, Dec 28, 2019 at 08:25:12PM +0000, Chris Lamb wrote:
> > Oops, it looks like it was already fixed by your change for #845055.
> 
> Ah, so this just requires being uploaded to unstable?

I think it was already fixed in unstable for #845055.  It was not
fixed in experimental, which this bug addresses.

-- 
Matt

Message #42 received at 947608@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>

To: "Matt Kraai" <kraai@ftbfs.org>

Cc: 947608@bugs.debian.org

Subject: Re: Bug#947608: markdown: please make the output reproducible

Date: Sun, 29 Dec 2019 11:01:21 +0000

Hi Matthew Kraai,

> I think it was already fixed in unstable for #845055.  It was not
> fixed in experimental, which this bug addresses.

Hm, that's kinda funny, as I originally saw this problem originate in
unstable:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/abyss.html

... and assuming it was a problem in markdown I did an "apt-get
source" which pulled in the unfixed experimental version! (ie. the fix
for the above package is elsewhere).

Thanks for the upload regardless; good to fix this in experimental.


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org 🍥 chris-lamb.co.uk
       `-

Send a report that this bug log contains spam.