Bug#1069100: libscout.jar has duplicate ZIP entries in the central directory

[Holger Levsen]

Package: libscout
Version: 2.3.2-3
Severity: normal
X-Debbugs-Cc: reproducible-builds at alioth-lists.debian.net, Fay Stegerman <flx at obfusk.net>

Dear Maintainer,

a few days ago I filed "#1068705: diffoscope crashes on libscout 2.3.2-3 build
on unstable but not bullseye" which then led Fay Stegerman to discover than
src:libscout builds a libscout.jar that has duplicate ZIP entries in the central
directory, pointing to the same actual entry in the ZIP. Please don't do this.

#1068705 has been fixed in the meantime and diffoscope 264 can now correctly
display the differences, as can be seen in
https://tests.reproducible-builds.org/debian/rb-pkg/unstable/i386/diffoscope-results/libscout.html
this is still an incorrect and broken zip file.

Thanks for maintaining libscout!


-- 
cheers,
	Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

I miss the old days were billionaires’ vanity projects were to build 1000 public
libraries or giant music venues.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-builds/attachments/20240416/0f2f2cdd/attachment.sig>