| Version annotated: |
3.7.1~repack-2 |
|
Identified issues:
|
|
Identifier:
|
captures_build_path_via_assert
|
|
Description
|
Absolute paths to source file names are embedded through assert(), which
embeds the value of the __FILE__ macro in the .data section, or via
filenames in debug symbols, which shows in the .text and .debug_str sections.
.
We have a pending patch to GCC to fix this in one central place.
.
https://gcc.gnu.org/ml/gcc-patches/2016-11/msg00182.html
.
If/when this is accepted, this issue should be fixed for all packages and
you should not need to fix it specifically in your package.
.
For more background information see:
.
• https://alioth-lists.debian.net/pipermail/reproducible-builds/Week-of-Mon-20160822/006788.html
• https://alioth-lists.debian.net/pipermail/reproducible-builds/Week-of-Mon-20160905/006984.html
• https://alioth-lists.debian.net/pipermail/reproducible-builds/Week-of-Mon-20160912/007076.html
|
|
|
Comments:
|
│ │ │ │ │ /usr/include/c++/6/bits/char_traits.h:290
│ │ │ │ │ - c0d9: 48 b9 2f 62 75 69 6c movabs $0x312d646c6975622f,%rcx
│ │ │ │ │ - c0e0: 64 2d 31
│ │ │ │ │ + c0d9: 48 b9 2f 62 75 69 6c movabs $0x322d646c6975622f,%rcx
│ │ │ │ │ + c0e0: 64 2d 32
.
The argument to `movabs` is a string:
% echo 322d646c6975622f | xxd -p -r ; echo
2-dliub/
.
(This is the start of a "/build-2nd/..." path; compare the 'montage' package)
.
Same issue as libkf5kface.
|
| |
|
Our notes about issues affecting packages are stored in notes.git and are targeted at packages in Debian in 'unstable/amd64' (unless they say otherwise).
|