amethyst/tools/zxing-cpp-build/ZXING_CPP_COMMIT at ccr-6a5d6ab5-s0yxnb - amethyst - Gitea on NOSTR

laantungir/amethyst

mirror of https://github.com/vitorpamplona/amethyst.git synced 2026-10-30 07:37:38 +00:00

Files

T

Claude 8ce05e887a fix(zxing-cpp): pin the source commit and make verify catch NDK-path leaks

- Pin the exact upstream commit (ZXING_CPP_COMMIT) next to the tag. A fresh
  clone fails if the tag moved; a reused clone is force-checked-out and
  cleaned, so neither a moved tag nor local edits can be built silently (the
  old fetch swallowed "would clobber existing tag" with `|| true`).
- verify-reproducible.sh builds the second time against a hard-linked copy of
  the NDK in another directory and fails on host paths in the output. Building
  twice from one NDK path could not have caught the build-id leak; with the
  old --build-id=sha1 restored it now reports NOT REPRODUCIBLE.
- hashes_in no longer aborts silently under set -e when the last ABI is
  missing; --abi/--out without a value fail with a message; verify rejects
  --out instead of printing "Reproducible" over empty hash lists.
- Decode .note.android.ident with bash's printf, so the NDK check works on
  macOS (BSD printf(1) has no \xHH).
- Drop the -D__DATE__/__TIME__ override, which reached clang as a bare
  identifier; clang takes both from SOURCE_DATE_EPOCH. Output is unchanged:
  all four ABIs still match the committed libraries byte for byte.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0114EYb9yjQ5MhqAmBwHzD6q

2026-10-07 13:08:10 +00:00

2 lines

41 B

Plaintext

Raw Permalink Blame History

287c85df6f961c8efbfb5ffd736cd9457b8b890e