lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <CAK7LNAQ6PFm1rnir0jRAdxeGRe3Zu5U9_f9andqL7vHKcBenWw@mail.gmail.com>
Date: Tue, 6 Aug 2024 14:21:11 +0900
From: Masahiro Yamada <masahiroy@...nel.org>
To: Giuliano Procida <gprocida@...gle.com>
Cc: linux-kernel@...r.kernel.org, linux-kbuild@...r.kernel.org, 
	kernel-team@...roid.com, elsk@...gle.com
Subject: Re: [PATCH REPOST] lib/build_OID_registry: do not embed full $0

On Mon, Aug 5, 2024 at 6:13 PM Giuliano Procida <gprocida@...gle.com> wrote:
>
> Please ignore this. I see other people have already posted different
> fixes achieving much the same goal.
>
> Though my change was much simpler!


True.

There were suggestions to replace this with a fixed string:


https://lore.kernel.org/linux-kbuild/CAK7LNASa-KedA_CTww6unckAGkJCQTctdbk0d-MUsN7wQpM=kQ@mail.gmail.com/
https://lore.kernel.org/linux-kbuild/ZfP1xdcYlUawm3uV@bergen.fjasle.eu/



A needlessly complex patch was applied, unfortunately.










>
> On Mon, 5 Aug 2024 at 10:09, Giuliano Procida <gprocida@...gle.com> wrote:
> >
> > Using $0 makes the output of this file sensitive to the Linux build
> > directory path. This is problematic for reproducible builds as it can
> > affect vmlinux's .debug_lines' section and vmlinux's build ID.
> >
> > Signed-off-by: Giuliano Procida <gprocida@...gle.com>
> > ---
> >  lib/build_OID_registry | 2 +-
> >  1 file changed, 1 insertion(+), 1 deletion(-)
> >
> > diff --git a/lib/build_OID_registry b/lib/build_OID_registry
> > index d7fc32ea8ac2..06f242202036 100755
> > --- a/lib/build_OID_registry
> > +++ b/lib/build_OID_registry
> > @@ -35,7 +35,7 @@ close IN_FILE || die;
> >  #
> >  open C_FILE, ">$ARGV[1]" or die;
> >  print C_FILE "/*\n";
> > -print C_FILE " * Automatically generated by ", $0, ".  Do not edit\n";
> > +print C_FILE " * Automatically generated by build_OID_registry.  Do not edit\n";
> >  print C_FILE " */\n";
> >




--
Best Regards
Masahiro Yamada

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ