Gentoo Archives: gentoo-dev

From: Brian Harring <ferringb@×××××.com>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] FYI: Rules for distro-friendly packages
Date: Sun, 27 Jun 2010 18:33:19
Message-Id: 20100627183306.GA9990@hrair
In Reply to: Re: [gentoo-dev] FYI: Rules for distro-friendly packages by Enrico Weigelt
On Sun, Jun 27, 2010 at 01:08:58PM +0200, Enrico Weigelt wrote:
> * Ciaran McCreesh <ciaran.mccreesh@××××××××××.com> schrieb: > > > > Well, at least for tar, I've experienced no problem here yet. > > > But: true, it might change between tar versions. > > > > The main offender is the compression program, not tar. > > hmm, I'm exclusively using bzip2 and never had these problems > yet. maybe it depends on the compressor type.
http://www.gentoo.org/proj/en/glep/glep-0025.html#the-problem-in-detail Note also that bzip2 had another change in output after that release- my memory is failing me a bit, but it was roughly a a reduction of their hash size to fix a CVE- either way, same thing, differing output. It happens, and further, is a well known potential for compressors. ~harring

Replies

Subject Author
Re: [gentoo-dev] FYI: Rules for distro-friendly packages Patrick Lauer <patrick@g.o>
Re: [gentoo-dev] FYI: Rules for distro-friendly packages Enrico Weigelt <weigelt@×××××.de>