[Reproducible-builds] Bug#807669: dh-strip-nondeterminism: Breaks some jar file

Sophie Brun sophie at freexian.com
Fri Dec 11 14:21:57 UTC 2015


Package: dh-strip-nondeterminism
Version: 0.014-1
Severity: normal

When building the package dirbuster (for kali), dh_strip_nondeterminism breaks the jar file.

The package is built but when I tried to launch the program, it failed with this error:
Exception in thread "main" java.lang.SecurityException: Invalid signature file digest for Manifest main attributes
        at sun.security.util.SignatureFileVerifier.processImpl(SignatureFileVerifier.java:287)
        at sun.security.util.SignatureFileVerifier.process(SignatureFileVerifier.java:240)
        at java.util.jar.JarVerifier.processEntry(JarVerifier.java:274)
        at java.util.jar.JarVerifier.update(JarVerifier.java:228)
        at java.util.jar.JarFile.initializeVerifier(JarFile.java:348)
        at java.util.jar.JarFile.getInputStream(JarFile.java:415)
        at sun.misc.URLClassPath$JarLoader$2.getInputStream(URLClassPath.java:775)
        at sun.misc.Resource.cachedInputStream(Resource.java:77)
        at sun.misc.Resource.getByteBuffer(Resource.java:160)
        at java.net.URLClassLoader.defineClass(URLClassLoader.java:436)
        at java.net.URLClassLoader.access$100(URLClassLoader.java:71)
        at java.net.URLClassLoader$1.run(URLClassLoader.java:361)
        at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
        at java.security.AccessController.doPrivileged(Native Method)
        at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:425)
        at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:358)
        at com.sittinglittleduck.DirBuster.Start.main(Start.java:51)


Disabling dh_strip_nondeterminism in debian/rules (via override_dh_...)
fixed it.

The source of package dirbuster can be found:
git://git.kali.org/packages/dirbuster.git

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.3.0-rc3-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages dh-strip-nondeterminism depends on:
ii  debhelper                         9.20151126
ii  libfile-stripnondeterminism-perl  0.014-1
ii  libtimedate-perl                  2.3000-2
ii  perl                              5.20.2-6

dh-strip-nondeterminism recommends no packages.

dh-strip-nondeterminism suggests no packages.

-- no debconf information



More information about the Reproducible-builds mailing list