[tor-bugs] #31538 [Applications/Tor Browser]: Windows bundles based on ESR 68 are not built reproducibly

[Tor Bug Tracker & Wiki]

#31538: Windows bundles based on ESR 68 are not built reproducibly
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  new
 Priority:  Very High                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  tbb-rbm, ff68-esr, tbb-9.0-must-     |  Actual Points:
  alpha, TorBrowserTeam201909,                   |
  GeorgKoppen201909                              |
Parent ID:  #30322                               |         Points:  2
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by gk):

 Replying to [comment:14 gk]:
 > The `libc++.a` files have the same content fwiw (even though the archive
 is not assembled reproducibly).

 That's probably the issue here as the linker is taking input from
 `libc++.a` as it appears in the `.a` file (thanks Martin).

 Now, we do two things with `libc++.a`: 1) we build the archive and 2) we
 have the `merge_libs()` function. I guess as a next step we try to pin
 down where exactly the problem occurs (maybe it's just 2) that is
 problematic here).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31538#comment:17>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online