[tor-bugs] #32520 [Applications/Tor Browser]: Output of go project contains nonreproducible datetime values

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat Nov 16 05:28:14 UTC 2019


#32520: Output of go project contains nonreproducible datetime values
------------------------+------------------------------------------
 Reporter:  JeremyRand  |          Owner:  tbb-team
     Type:  defect      |         Status:  new
 Priority:  Medium      |      Component:  Applications/Tor Browser
  Version:              |       Severity:  Normal
 Keywords:              |  Actual Points:
Parent ID:              |         Points:
 Reviewer:              |        Sponsor:
------------------------+------------------------------------------
 Steps to reproduce:

 1. Run `./rbm/rbm build go --target release --target torbrowser-linux-
 x86_64` twice.
 2. Compare the hashes of the results.

 Expected behavior:

 The hashes should be reproducible.

 Observed behavior:

 The hashes are not reproducible.

 Other info:

 I'm attaching a diffoscope.  Most of the nonreproducibility seems to be
 due to datetime values.  I suspect, but have not verified, that these
 datetime values are being inserted by the (currently unmaintained) Go
 1.4.x compiler, and that therefore we can't expect an upstream fix.
 libfaketime seems like the most straightforward way to fix the issue.
 Would a patch be accepted that uses libfaketime to make the datetime
 values in the `go` project's output reproducible?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/32520>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list