public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/glib2] cve-2026-58016-f44: Drop manual byte compilation and call to marshalparser
@ 2026-08-11 10:38 
  0 siblings, 0 replies; only message in thread
From:  @ 2026-08-11 10:38 UTC (permalink / raw)
  To: git-commits

            A new commit has been pushed.

            Repo   : rpms/glib2
            Branch : cve-2026-58016-f44
            Commit : ddcd084633b758e6e4699f46e8167eab6ae49542
            Author : Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
            Date   : 2024-06-18T14:09:21+02:00
            Stats  : +1/-16 in 1 file(s)
            URL    : https://src.fedoraproject.org/rpms/glib2/c/ddcd084633b758e6e4699f46e8167eab6ae49542?branch=cve-2026-58016-f44

            Log:
            Drop manual byte compilation and call to marshalparser

Since https://fedoraproject.org/wiki/Changes/ReproducibleBuildsClampMtimes,
the issues with cache invalidation should be fixed and the timestamp
of a generated file set to $SOURCE_DATE_EPOCH.

Pyc files are processed automatically by add-determinism:
https://fedoraproject.org/wiki/Changes/ReproduciblePackageBuilds

---
diff --git a/glib2.spec b/glib2.spec
index aaafa60..1f90c4f 100644
--- a/glib2.spec
+++ b/glib2.spec
@@ -33,7 +33,6 @@ BuildRequires:  pkgconfig(sysprof-capture-4)
 BuildRequires:  pkgconfig(zlib)
 BuildRequires:  python3-devel
 BuildRequires:  /usr/bin/g-ir-scanner
-BuildRequires:  /usr/bin/marshalparser
 BuildRequires:  /usr/bin/rst2man
 
 # Dependencies for tests
@@ -119,21 +118,7 @@ the functionality of the installed glib2 package.
 %install
 %meson_install
 
-# We need reproducible .pyc files across architectures to support multilib installations
-# https://bugzilla.redhat.com/show_bug.cgi?id=2008912
-# https://docs.fedoraproject.org/en-US/packaging-guidelines/Python_Appendix/#_byte_compilation_reproducibility
-%global py_reproducible_pyc_path %{buildroot}%{_datadir}
-
-# Since this is a generated .py file, set it to a known timestamp
-# because the source timestamp is baked into the .pyc file
-# Also copy the timestamp for other .py files, because meson doesn't
-# do this, see https://github.com/mesonbuild/meson/issues/5027.
-touch -r gio/gdbus-2.0/codegen/config.py.in %{buildroot}%{_datadir}/glib-2.0/codegen/*.py
-
-# Perform byte compilation manually to avoid issues with
-# irreproducibility of the default invalidation mode, see
-# https://www.python.org/dev/peps/pep-0552/ and
-# https://bugzilla.redhat.com/show_bug.cgi?id=1686078
+# Perform byte compilation manually on paths outside the usual locations
 %py_byte_compile %{python3} %{buildroot}%{_datadir}
 
 mv %{buildroot}%{_bindir}/gio-querymodules %{buildroot}%{_bindir}/gio-querymodules-%{__isa_bits}

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-08-11 10:38 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-11 10:38 [rpms/glib2] cve-2026-58016-f44: Drop manual byte compilation and call to marshalparser 

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox