Bug#940973: libarchive-zip-perl breaks strip-nondeterminism autopkgtest: error: becoming Archive::Zip::DirectoryMember

Chris Lamb lamby at debian.org
Mon Sep 23 13:02:04 BST 2019


notfound 940973 strip-nondeterminism/1.6.0-1
affects 940973 + strip-nondeterminism
tags 940973 + fixed-upstream
forwarded 940973 https://github.com/redhotpenguin/perl-Archive-Zip/issues/51
thanks

Chris Lamb wrote:

> Will investigate soon.

This appears to be happening as libarchive-zip-perl 1.66 incorrectly
hardcodes the minimum zip version required to extract. Here is the
diffoscope output between the expected test output file and the actual
one generated with this version:

    --- t/fixtures/jar/jdependency.jar.out
    +++ jdependency.jar
    ├── zipinfo -v {}
    │ @@ -21,15 +21,15 @@
    │    META-INF/
    │  
    │    offset of local header from start of archive:   0
    │                                                    (0000000000000000h) bytes
    │    file system or operating system of origin:      Unix
    │    version of encoding software:                   2.0
    │    minimum file system compatibility required:     MS-DOS, OS/2 or NT FAT
    │ -  minimum software version required to extract:   1.0
    │ +  minimum software version required to extract:   2.0
    │    compression method:                             none (stored)
    │    file security status:                           not encrypted
    │    extended local header:                          no
    │    file last modified on (DOS date/time):          2015 Feb 5 18:09:30
    │    32-bit CRC value (hex):                         00000000
    │    compressed size:                                0 bytes
    │    uncompressed size:                              0 bytes
    │ @@ -49,15 +49,15 @@
    │    META-INF/MANIFEST.MF
    │  
    │    offset of local header from start of archive:   39
    │                                                    (0000000000000027h) bytes
    │    file system or operating system of origin:      Unix
    │    version of encoding software:                   2.0
    │    minimum file system compatibility required:     MS-DOS, OS/2 or NT FAT
    │ -  minimum software version required to extract:   1.0
    │ +  minimum software version required to extract:   2.0
    │    compression method:                             deflated
    │    compression sub-type (deflation):               normal
    │    file security status:                           not encrypted
    │    extended local header:                          no
    │    file last modified on (DOS date/time):          2015 Feb 5 18:09:30
    │    32-bit CRC value (hex):                         ea7cd5ff
    │    compressed size:                                98 bytes

This has been fixed upstream here:

  https://github.com/farblos/perl-Archive-Zip/commit/b0179cbbfeb276ceac0f424d32acf56811b01568

Reassigning to libarchive-zip-perl; there is unfortunately nothing
strip-nondeterminism can or should really do here, but setting
'affects' for visibility.


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org 🍥 chris-lamb.co.uk
       `-



More information about the Reproducible-builds mailing list