Reproducable builds

[Hal Murray]

> I'm lost.  Fixes what?  Does NTPSec have assembly??

As far as I know, there is no assembly source in NTPsec.

The machine language stuff in my recent email is from objdump -- 
disassembly rather than assembly.

---------

Your changes were mostly tab and comment changes.  But some of them were 
big.  It would be very hard to verify by inspection that they didn't make 
any real changes.

So I played around a bit.  With a few tweaks, I could make reproducable 
builds.  That is run build script, checksum ntpd.  Run it again, get the 
same sum.

But changing a comment gave a different sum.  I never tracked down what is 
going on.

objdump on ntpd seems to give reproducable builds.  If I build the 
unpatched source, grab ntpd, apply your patch, build again, grab another 
ntpd, take objdump of both ntpds and diff them, they are the same.

But there is one exception !1530.  Your first pass gave differences in 2 
instructions.  Your second pass "fixed" it.  I did a kludgy manual bisect 
to find the change that fixed one of the differences.  That change is 
small enough to inspect by hand.  (eye?)  It looks fine.

So I don't understand what's going on.  I was hoping somebody else might 
have an idea or opinion.



-- 
These are my opinions.  I hate spam.